Yes.
If you want to try out, you can generate a seed on this page : https://iancoleman.io/bip39/
That way you can try things out without compromising your funds.
And they can not kidnapp the transactions or anything like that?
The most extent someone can go with this setup is :
If your Electrum connects only to the same Electrum server all the time, if this Electrum server operator are malicious, then they can roughly know the country where you are located and yes, recoup that someone spent x transactions, totalling x BTC, from that specific IP. The use of a VPN counters that.
By default, Electrum connects to servers randomly.
If you inadvertedly catch some sort of malware, even in this case your funds are safe.
(You are safe by using the Coldcard as I believe all transactions are signed on the card itself.)
Don't keep a digital version of your seed, that's all.
Apart from that, there is not much one can do with someone else's IP.
To attack you means that you have machines with open ports that are listening for inbound traffic on that very specific IP.
Given your questions; (no judgement at all, I encourage everyone to get help and educate themselves)
I doubt this is your case.
Also, it's not possible to "kidnap the transaction" since you attach to it the cryptographic proof that you are in control of the BTC addresses you spend from.
That proof cannot be forged, and only the person in possession of the key can generate a valid proof.