Hello BBS community, i have a question that might be obvious or not.

So when you are using Metamask, all protocols require you to approve use of your wallet in order to make trades etc... So turns out some of these protocols are malicious and when you accept they can drain your funds from your wallet.

My question is, If you are using a hardware wallet with your Metamask, can your funds be drained if you click on a malicious contract, or it doesn't matter because you are using a hardware wallet, and it is impossible for them to access your funds ??