Why the scope matters
Automation normally requires either custody or a credential whose limits depend on configuration. An agent approval turns that trust question into a protocol-enforced scope question.
Revocation is unilateral: it is signed from your wallet and does not require the operator's cooperation or availability.