This post, and the "not your keys, not your bitcoin" part made me think of something - I remember having to give them a ton of permissions at the start. I've used some other dapps before, but I've never seen one ask for this many permissions. Could that be an issue? It seems abusable.