I believe Coinbase Wallet users can easily get phished to give a DApp to take control and grant spending permission to an external entity.