Lower risk, lower reward. Keep in mind that 401k is not 100% guaranteed either.
lose entirely with a social engineering attack or a SIM swap.
SIM swap? You mean like SMS 2FA? (don't use SMS 2FA, BTW).
Anyway, if your risk scenario includes a "wallet inspector", you definitely shouldn't buy Bitcoin, or carry money around.