I now see people shouting "Just authorize once to receive airdrops / social mining" and I get a conditioned reflex: don't rush in yet, first check if the authorization is unlimited. To put it simply, unlimited authorization is like giving away your bank card with no password and no limit. The project team isn't necessarily malicious, but if something goes wrong with the contract, you'll be the one caught in the crossfire. Revoking permissions is like sleeping; it's usually troublesome, but if a real problem occurs, you'll regret not doing it. Anyway, I’m used to checking the authorization after each interaction; if it can be limited, I limit it, and clear out permissions periodically. I’d rather miss out on the excitement of "attention is mining" than wake up in the middle of the night to find my wallet emptied.