The USB dongle is a legit concern. Never plug anything into your computer if you don’t know where it came from.

Dropping compromised flash drives in places like parking garages is 100% a used tactic. It’s been used to gain access to government systems before.