Surprising fact: a browser extension that signs a single smart-contract call can, in practice, grant a dApp access to...