Recently, I saw a bunch of screenshots of APY from yield aggregators again. The numbers look pretty good, but my first thought isn't "making money," but rather "which contract is actually generating this yield from?" In other words, APY is just superficial; behind the scenes, it might be that you've thrown your money into several layers of pools: first authorizing the aggregator, then transferring to the strategy contract, then borrowing/liquidity providing on other protocols. Any mishap in any layer means you take the blame, plus you have no idea about the counterparty risk.

These days, with cross-chain bridge hacks making the news again, everyone suddenly becomes very cautious and says "wait for confirmation." When outrageous oracle price deviations appear, everyone collectively pretends to be dead and waits for the chain to settle down... Anyway, whenever I see "auto-compound/one-click," I first check the authorization to see if there's unlimited access or if I can withdraw at any time. Complexity is my enemy; the fewer layers, the better. Sleep more peacefully.