In practice the main thing to watch out for is TLS-stripping attacks where malicious exit nodes will try to downgrade your connection to cleartext HTTP. This will give you a warning in the browser. Don't allow it but ctrl+shift+L in Tor Browser to retry a new connection on a hopefully better circuit.
In general I'd also say it's unsafe to use tor with unencrypted unauthenticated cleartext HTTP since it allows exit nodes to do all sorts of shenangigans undetected. Make sure it's https://(...) or http://(...).onion (.onion Hidden Services are authenticated by cryptographic key and terminate straight at the endpoint without an exit from the tor network over internet so aren't subject to that as long as you make sure the domain name is correct)