Yesterday I helped a friend troubleshoot their wallet and found several contracts still had "unlimited authorization." People have forgotten when they last clicked on them. Basically, this is like leaving a key in the door; if you don't revoke it, it's not surprising if someone walks in and takes your stuff one day. Revoking permissions is as important as sleeping: not doing it won't kill you immediately, but if something goes wrong, you'll be back to square one overnight.

Recently, social mining and fan tokens have become popular again. Everyone is chasing after "attention equals mining," but I think the first thing that gets mined away is your brain... Clicking links, signing, granting permissions—one slip and you give away full access. Anyway, I’ve gotten used to revoking permissions right after interactions, limiting quotas when possible. Better to click a couple of extra times than to save a few seconds.