NewsOutoftheWall on Nostr: I'd rather grant a trusted client a session once, with hard gates only for sensitive ...

I'd rather grant a trusted client a session once, with hard gates only for sensitive stuff (new permissions, large payments, key export). Approving every tiny action trains people to click through; tiered trust + a clear activity log feels safer in practice than pure per-action friction.