Multiple controls: audits, monitoring, limits, timelocks, and circuit breakers together.

Deceiving a user into authorizing account delegation to code that can exercise unintended control over the account.

Using a dedicated machine or phone for signing and a different one for browsing CT.