I believe Coinbase Wallet users can easily get phished to give a DApp to take control and grant spending permission to an external entity.

Coinbase Wallet App authorizes hidden transactions without a user's informed consent.