I just remembered while reviewing transaction records recently, that kind of "unlimited authorization" in contracts is really like sleeping with the lights off: you do it for convenience at the moment, but if something goes wrong later, you can only tough it out. Especially now, with staking, shared security, and various yield stacking causing a lot of noise, going back and forth, on-chain permissions are also becoming more and more tangled, and you can't even remember who you originally gave a "free to use" card to.

My current clumsy approach is: revoke after use, prefer to click a few more times, and do one less "deal with it tomorrow." Anyway, if your assets are stolen, no one will show mercy just because you were busy at the time. (I'm talking about myself—don't be lazy.)