That only restricts the blast radius to one key. One is unawares of when, how, and for what purposes that key is used - as forwarding the key means it's availa

That only restricts the blast radius to one key. One is unawares of when, how, and for what purposes that key is used - as forwarding the key means it's available for use by any user process (as the mechanism behind the forwarding is user-owned) or root (as root can see everything). Touch-to-authorize helps mitigate that. If one seees the prompt come up when they've just performed a git pull, it's expected and likely non-malicious. Allow. If it pops up after having ran "ls" or "randomly" in the course of a session - what's going on? Deny.