Curve.fi is now also suffering from DNS spoofing and malicious contract approvals. You essentially need to run your own node AND UI to have any semblance of "safety".