A while ago, I checked my wallet permissions and found that I had still granted a certain old DApp "unlimited" access... I was stunned, it was like having a key in the drawer that I never took out. As for smart contracts, honestly, if you don't revoke, they just sit there, waiting for you to slip up someday, or for the project team/front end/dependencies to have an issue.

My current habit is: after completing a task, I revoke permissions right away, just like checking the door lock before going to sleep. Especially recently, when I see news about cross-chain bridges being hacked again, I realize that "not clicking on links isn't completely safe," because permissions are granted in advance. When something really happens, you simply won't have time to react.

Is revoking permissions troublesome?
Troublesome, but more troublesome than having your assets stolen.

And during the oracle price anomaly wave, everyone was saying "wait for confirmation"... Actually, I understand it as: don’t rush to act, first reduce your exposure. Anyway, I now prefer to spend a few extra minutes revoking permissions rather than waking up the next day and replaying how I got educated again.