Recently, someone asked me again about yield aggregators and that APY looks pretty attractive, should I go for it?

My first reaction to high APY isn't excitement, but to check the contract permissions and see what the money is actually being used for: is it going into someone else's vault, lending to whom, and can the admin change strategies with a single click...
In plain terms, APY is backed by contracts and counterparties; trusting someone’s hand is like handing over half your life.

Others think "aggregators = automatically finding the best yields, earning passively," but in reality, it's often "yield stacking into a bunch of authorizations and upgradeable contracts, and when something goes wrong, you don't know who to blame first."
Recently, the staking/sharing security setups have been criticized as "copycats," which I can understand— the higher the yield stacking, the longer the chain, and any breakage hurts.

My own habit is still to be cautious: only interact with permissions that are clean, upgrade with a time lock, preferably multi-signature control; earning a bit less is okay, safety is the top priority.
That's how I start.