quick question:
how come etherscan connect wallet never prompts you to sign a message?
is this secure?

because knowing is finding the limits /outercorps

yup I get it now
just so used to constantly signing messages whenever I login w wallet

it doesn't care if you're faking it. if you don't actually have the private key, you won't be able to sign a tx anyway

ahhh I see
so signing messages is purely for a middle ground (verify this address is yours before you actually do an onchain txn)

any action you'd take through etherscan is either an onchain tx, or just reading public chain data. so anything that needs the auth happens in a tx.

I don't see why you'd need to sign a message for Etherscan

Lot of dapps use connect and don't  need sign in (siwe), depends on what you're doing I guess

Why would you have to sign a message? The only reason sites do that is so that they can track you.

I think it sends the message if you have no wallet connected (asking you to confirm in the wallet, after accept the no-warranties message, but it do not send the signing message if you previously connected your wallet. Then, it just connects.