ZeroDev is one I’d shortlist—the scoped permissions are interesting: specific contracts, spending limits and expiry. But I’d judge the actual app experience too. Can users understand what they’re authorising and revoke it easily? That’s where the UX really earns trust.