There are always people who find it troublesome to revoke contract permissions, especially those with unlimited allowances. Basically, it's like leaving your wallet keys at the door and still expecting no one to take advantage. You haven't had an incident, just good luck; it's not because your risk control is good. Recently, cross-chain bridges have been hacked again, and oracle price feeds have been acting up, so everyone is just "waiting for confirmation." In fact, it's the same logic: don't treat the worst-case scenario as a low probability and ignore it. My habit is to revoke permissions after use, avoid unlimited allowances when possible, and periodically review the permission list. It's like brushing your teeth before bed—an automatic routine that doesn't generate profit but helps avoid pitfalls. Discipline isn't obvious most of the time; only when something goes wrong do you realize its value.