Simulate, read, and revoke
Before signing anything nontrivial, use a transaction simulator (many wallets now show this natively, and standalone tools exist as well) to see the actual state changes a transaction will cause before it executes: which tokens move, which contracts gain approvals, and for how much. A wallet's default confirmation popup often shows raw function calls and hex data that are meaningless to read directly; simulation translates that into 'this will send X and approve Y for Z amount', which is the information that actually matters for deciding whether to sign.
Token approvals accumulate silently over time, every dApp you've ever interacted with potentially still holding standing permission on tokens you approved months ago and forgot about. Periodically reviewing and revoking unused or unlimited approvals (using a revocation tool that reads your wallet's approval history on-chain) closes off attack surface from old, possibly now-malicious or compromised contracts you no longer actively use, at the cost of a small gas fee per revocation.