It works the same way you would have done with a “regular” wallet except when you submit a transaction you need to confirm it on a physical device.
Keep in mind that your tokens are not actually stored on any type of wallet/account ever. They are always on the blockchain and anyone that has the “key” to the address can have access to your tokens.
This is one of the reason why it is always recommended to store your seed phrase on a piece of paper or something similar and not on your computer/digitally as it is harder to compromise/get access to. That said, interacting with bad contracts can also give the creators of that contract access to your funds.
Here is an example of how sophisticated these scams can be:
https://twitter.com/TrustWallet/status/1623355786557632512?s=20&t=Wxl97XQbGk1mj02lFE_8cA