Security implications of PECTRA upgrade

something I have stumbled upon:

"Reminder guys: now with PECTRA ethereum upgrade, you only need to sign a message to get completely drained! Before, you actually had to sign the TX.

Be very careful of what you sign now – even an offchain message!"