I'm really not pretending: the issue of unlimited contract authorization is the same as not locking your phone—convenient now, but crying later if something goes wrong. Many people think "I'm safe as long as I don't make a transfer," but once you've authorized it, if a malicious contract/phishing site gets the chance, they'll treat your wallet like a buffet... The most ridiculous part is you still think you're sleeping soundly.

My current habit is: revoke permissions after use, just like closing the door before sleep—takes two minutes and saves a lot of worry. Recently, we've been talking about interest rate cut expectations and the dollar index; when risk assets go up and down, everyone gets itchy to jump in, and it's easier to click on strange links during these times. Anyway, I’d rather earn a little less than wake up one day to find "authorization still there, but the coins are gone."