Quote every name
Unquoted names break on spaces and on characters like * and ?. Quoting is one keystroke that removes a whole class of failure, and it is the reason scripts that skip quoting are quietly wrong on half the files they touch.
Prefer explicit over clever
A command that names the files it touches can be reviewed. A command with a wildcard has to be reasoned about, and reasoning about a glob under time pressure is where the wrong files get removed.