Recently, I was educated for the third time by "airdrop interaction": you think you're accumulating qualifications, but they might be accumulating your authorization records... Anyway, I now have two bottom lines: I won't touch anything that requires unlimited authorization from me, and if I don't understand the signature, I’ll close the webpage first, I’d rather miss out than force it. FOMO, to put it simply, is just trading emotion for probability, so forget it.

And that kind of advice to "just casually mix in for more privacy" is also quite split. Last week, there was a heated debate in the group: one side said it's a basic right, the other said to avoid compliance risks. I'm personally lazier—if I can avoid unnecessary steps, I do. Keep interactions minimal, separate wallets, at least the pain from being exploited is less concentrated when being attacked. That’s all for now.