There are so many websites these days that require you to connect. I've been connecting other wallets with low balances to test things out, but there doesn't seem to be much information around on what is good practice here.
My big balances are secured by Ledger so I suppose I don't need to worry about the coins simply being stolen without my approval, but what if I connect the Ledger to approve some coins and it steals other coins or uses the approval for something else. Is any of this possible?
When should I not connect to a website?
Why do you have to connect your main wallet(Ledger) if you can always use another wallet for it? Do not connect your main wallet, always use a separate wallet for connecting to websites.
But as long as the website doesn't ask for any of your private keys or there's no automatic contract that would take ownership of your wallet. I'm not sure if that's possible but mostly, the ones that have been hacked that I've seen are those people that sign for a phishing site.