Research post asks whether spending limits and recovery should live in the asset rather than the account, contrasting ERC-8403
It explores putting rate limits on the token itself instead of in wallet code, so a stolen key could not drain an account as quickly.