You have to sign a transaction, but I _think_ the details of transactions can be obscure enough to not be clear what you're authorizing. Accidentally authorizin

You have to sign a transaction, but I _think_ the details of transactions can be obscure enough to not be clear what you're authorizing. Accidentally authorizing the transfer of tokens/NFTs, which are then drained.