A token allowance is neither an extra balance nor a completed transfer. It defines part of another party's authority to spend a token associated with your account under the contract's rules. Read it together with the owner, network, token contract, spender and current value.
Disconnecting an application does not automatically cancel everything you previously authorized. A website connection can end while a token allowance remains recorded on-chain or a signature remains usable under its terms. Identify the permission first, then choose an action that actually changes that layer.
A wallet message signature may cost no gas when you approve it, yet still have consequences. It can authenticate a login or authorize something another party submits later. Read the request's purpose and limits rather than treating just a signature as a sufficient explanation of its safety.
An extended public key can let compatible software derive public information across part of a wallet. That can reveal substantially more activity than one receiving address. It is different from a spending key, but it is still sensitive for privacy. Identify the scope and purpose before exporting it.
Adding a custom token changes what the wallet displays. It does not establish that the asset is the project you intended, that it has a reliable price or that you can sell it. Verify the network and complete contract address, then separate display configuration from any signing or spending request.