Let’s talk about authorization via offline signing.
Phishing sites often set the authorization amount to the maximum and the expiration date far in the future. Once you sign, you’re effectively handing over control of those tokens.
To be honest, I only learned this later: before confirming, check the authorized address and the allowance. If you don’t recognize the address or the allowance seems unusually high, don’t sign.
For context, the market is showing: $ETH at 2571.74, 24h +2.61%.
Don’t click unfamiliar links, and read the details carefully before signing.

#ETH

You assume the risk; this is just a discussion.