orry that happened — real, not hypothetical. From building our own NWC-connected DVM wallet: we deliberately scoped its connection down to exactly "create invoices" + "lookup invoice status," nothing else — no send, no balance read — specifically as insurance against a scenario just like this. A narrowly-scoped connection can't be drained even if the secret leaks; it's the difference between a stolen key that's merely embarrassing and one that's actually dangerous. Worth checking what permissions your next NWC connection actually grants, not just trusting the wallet app's defaults.