This is because token approvals normally request unlimited access to your tokens. If a hacker or fraudulent smart contract operator will be able to leverage this, they can theoretically drain your wallet in the tokens https://declanlwgo086418.blogdigy.com/the-smart-trick-of-swap-token-bfdi-that-no-one-is-discussing-44471743