Last night before bed, I checked on-chain records again and saw someone being drained through "infinite authorization," which really pissed me off.

When it comes to privacy, ordinary users should not assume that "on-chain anonymity = no one can trace," honestly, your address is like a username, it looks hidden most of the time, but if you need to comply and investigate, transaction paths, deposits and withdrawals, even which contracts you've interacted with can all be linked together.
The privacy you can reasonably expect is probably "not actively exposing yourself makes it less likely for strangers to target you," but don't expect to be invisible to professional analysis and law enforcement.

Recently, the modular and DeFi layers are being hyped up, and it's normal for users to be confused... Anyway, no matter how the narrative changes, the permissions in your wallet won't automatically become secure.
My bottom line is: if you can avoid granting infinite permissions, don't grant them; if you really need to use them, revoke immediately after use—don't wait for a "regret pill."
No one can precisely define the boundaries of compliance, but at least you can control your own permission boundaries.