These days, watching L2s argue again about TPS, fees, and subsidies being more attractive, I'm actually more concerned about those pop-up windows that say "Authorize First and Then." Once a contract authorization is given with no limit, essentially it's like lending out your wallet keys without asking when they'll be returned. Usually you don't notice it, but when something goes wrong, your wallet can be emptied in an instant. I've seen too many cases of those "grab-and-go" tracks in the mempool.

Now I’m used to closing the door before sleeping: revoke authorization after use, at least avoid leaving unlimited permissions. I used to think about organizing all authorizations at once, but I kept procrastinating; later I set smaller goals—revoking 1-2 of the most used permissions daily—and that helped me stick with it longer. Being suspicious is quite tiring, but this little effort brings peace of mind.