Am I the only one whose a little sketched out by letting apps other than Warpcast add/delete posts and change my profile? I get that it's the point but still..

solidity & product. weekly interviews with crypto devs @ web3galaxybrain.com

Definitely a valid concern. 

The main protection right now is that removing the signer will remove all messages sent by that signer for your fid. Seems good enough for now.

building with @emo.eth / prev: manifold.xyz opensea.io

That's good to know. I'm equally afraid of having my old stuff deleted and not even knowing

Deleting a cast is a message in itself so removing the signer will remove the delete as well (bringing the cast back).

Scoped permissions could eventually allow for only permitting signers to delete casts they created.

I guess it's more there's no notification for deletes so you wouldn't know