We mainly use the Bitcoin.com wallet on our phones and Electron Cash on our computers. Both are open source with many eyes looking at the code. We try to teach our user to verify hashes on upgrades and to have copies of dev pub keys on their computer to verify on a fairly regular basis (but not every upgrade).

We also try to keep scammers out our community and I think we are doing a fairly good job, better than most crypto communities.

when the fork happened there were indeed scam sites that asked you to "paste your private key to see if you have BCH"

There were also replay attacks possible, so that if you paid some BCH to someone they could replay the transaction to get the corresponding BTC as well

Neither of these are a concern anymore AFAIK (the first one never really was, never give away your private key)

And yes, "bcash" has a negative connotation.

You confuse it with other forks, for example in Bitcoin Gold key stealing was very prevalent. It wasn't a big problem for Bitcoin Cash. Bitcoin Cash also had replay protection from the start.