I'd like to hear @bumi 's thoughts on this. It's a good debate to have to make NWC as secure as possible for users.

This is a non issue and they know it. Just come out and say you aren't implementing nwc instead of hiding behind an hypothetical scenario. Most wallets that implement nwc allow users to set the limits. Anyone using nwc to zap would knows this at the point of connecting the nwc string. They could even have made it an advance only feature that you can only expose in settings instead of this half hassed excuse