Close every door a drainer could use.

Approvals you signed months ago still let someone move your tokens. Shield finds them, revokes them, and reclaims the SOL locked in empty token accounts. You sign everything in your own wallet.