That's quite a horror story. But, with a happy ending.
One nice thing about Metamask is the idea of aggregating networks and tokens and not necessarily having all your assets exposed. If you suffered, that attack, they were only going to focus on what they knew about the project (and thus the related tokens) if you hadn't been so quick surely the creativity would have gotten to other tokens.
You were also lucky that it wasn't a well designed smart contract that simply drained you of all your assets. There are many such
!PIZZA
RE: Horror Story: The Day I Got Scammed Really Good