I now kind of treat "revoke contract authorization" like brushing my teeth before bed... Not doing it might not cause immediate problems, but if something does happen, it can be pretty disastrous. In the past, to save effort, I set unlimited permissions with one click, but as a result, my wallet had permissions for a bunch of old dApps, and I forgot who could move my assets. Basically, I copied the keys everywhere and never took them back.

Recently, there's been talk about social mining and fan tokens, with phrases like "attention is mining," which sounds exciting, but the more scattered your attention, the easier it is to slip up and authorize something by mistake. The more signatures you sign, the more numb you become. Anyway, I now only allocate enough quota for new projects; once it's used up, I revoke it—just to sleep more peacefully. Whether I make money or not is another matter; don’t trade your sense of security for laziness.