Approvals: the step to read twice

Before a protocol can move your tokens you grant it an allowance, and many apps request an unlimited one by default. That permission stays alive after you leave the site, so a contract compromised months later can still drain the balance. Set a finite amount when the wallet lets you, and review old approvals periodically.