I used to think that unlimited contract authorization wasn't a big deal; after all, I only had that much in my position, and I was too lazy to click revoke, saving two steps.

Later, I realized this thing is as important as sleeping: you might think you're just resting with your eyes closed, but in fact, you're leaving yourself a lifeline for tomorrow.
Once authorization is granted, any incident involving the project team, frontend, private key leaks, or even those pages where you "just collect some rewards," can easily turn your balance into a buffet.

Recently, the set of staking and sharing security measures being criticized as "nested doll" (overly complex), looks quite similar to me: while stacking yields, permissions are layered on top of each other, and the risks aren't written next to the APY.
Anyway, after I finish my operations, I just revoke a few permissions, like turning off the lights and locking the door, to avoid waking up in the middle of the night and finding myself reviewing the scene of an incident.