With Alby Hub (and some other @nprofile1q... wallets) you can give your OpenClaw a sub-wallet with a budget. So the wallet is both completely isolated from your main account, and has protection against getting drained in one go.

Unfortunately MCPs don't seem to be first citizens in OpenClaw, so Alby MCP is not easily usable. I plan to create a CLI version.