I only remember one sentence when taking notes: Giving unlimited authorization in a contract is like sticking your bank card password under the pillow, don’t expect to “revoke it tomorrow,” frankly, revoking permissions is as essential as sleeping — if you don’t revoke it, one day when the pool withdraws liquidity or the admin changes permissions, you won’t even have time to curse; and right now, everyone is still complaining about MEV, unfair ordering, validators getting fat, retail investors can’t even withstand a little “slip of the hand,” anyway, every time I test the safety, the first thing I do is revoke authorization, living one more day is a win.