Two browser wallets that are not MetaMask, judged only on the seconds before you sign. One publishes its whole extension under MIT. The other bought the security team it was already using. What each vendor's own documents will and will not support.
A peer-reviewed USENIX Security '26 paper reports that over 63% of EIP-7702 authorisation transactions are associated with malicious attacks on the accounts that signed them. What a delegation is, and why signing one is not the same as approving a token.
The default door into Ethereum is a hot wallet, and a hot wallet is a decision about risk. The threat model, the approvals hygiene, and where MetaMask earns its keep.
The FCA has confirmed a late-2026 consultation on DeFi, alongside updates to its financial-crime guidance. Interfaces, front-ends, and wallet software should read the calendar.