Lately, I’ve seen a lot of people go on a rampage of clicks just to testnet incentives and point expectations, and then—without thinking—go ahead and grant the contract an unlimited allowance… To put it bluntly, it’s pretty much the same as not closing the door and going to sleep. It’s convenient, sure, but if something really goes wrong, you won’t even know where the leak came from. Don’t keep wondering, “Will the mainnet issue tokens?”—just treat your wallet like a wallet.

As for me right now: I use a one-time allowance whenever I can. If I really need to give a large allowance, I’ll revoke it on a regular schedule, especially for those dApps that I don’t even remember when I authorized them. I don’t mind spending a few extra bucks on gas—at least then I can sleep easy. In the end, authorization usually isn’t painful day to day, but one bad blow-up is enough to make you remember for a lifetime.