@cassie
Yeah, this doesn't feel good. If it had limits, e.g. expiry block height, limits like ERC-20s, literally anything, I'd feel better about it. I get the commit element declares the _intent_ of the scope, and revocation by bumping the nonce exists, but I can't see a future where this doesn't get abused by wallet drainers.