Recently, I saw new L1/L2 projects issuing incentives to attract TVL, and in the group, people are rushing in while complaining "mining and selling"... I don't have much to explain, anyway, it's lively but don't skimp on permissions.

Many people grant unlimited permissions for convenience, which basically means lending out their wallet keys without setting a return date. When the contract is upgraded or permissions are altered, you might wake up to find your balance has decreased significantly.
My current approach is: revoke permissions after use, limit quotas when possible, and avoid suspicious upgrade/owner permissions.
Revoking permissions is like sleeping—it's a daily routine where "you don't do it, but you won't die immediately, but doing it gives peace of mind."
That's all for now.