I once tried to connect a small tool that automatically runs strategies with my regular wallet, and the first step was to ask me to sign a series of authorizations... I was actually a bit tempted at the time, but then I calmed down and thought about it. Honestly, anything that can trade automatically is most easily used as bait for "saving effort."

That time, I drew the line: never put mnemonic phrases into web pages or plugins (even if they look very much like official ones), only sign after clearly seeing whether it's "logging in" or "authorizing spending/transferring assets," keep authorization limits as small as possible, and set time limits if possible.
Anyway, I now only do minimal interactions with my regular wallet, keep large holdings cold, and use isolated addresses for cross-chain and new sites, too lazy to gamble with phishing sites.
I don’t care who’s pushing narratives, but when it comes to security, don’t skimp on those two minutes.