I just closed a few yield aggregator pages, and seeing that exaggerated APY made me feel a bit guilty... To be honest, what you're getting isn't "revenue," but a collection of questions about how the contracts transfer funds, how they authorize, who can upgrade, and who bears the responsibility if the underlying pools have issues. No matter how smooth the frontend is built, it can't hide the fact that an upgradable contract with admin privileges can change the rules at any time.

Recently, that main public chain has been upgrading/maintaining itself, and the community is speculating whether the ecosystem will migrate. I'm more concerned about: who signs off on cross-chain transfers, who holds custody, and which bridge has a history of incidents that could fill an entire page. Anyway, I now get into the habit of opening the permissions list first; if I see "unlimited authorization," I revoke it immediately. No matter how attractive the APY is, I won't trade security for it.