Why am I being asked to connect to a dapp?
For sites to see your account address, they must ask you for access. All they're gaining in these situations is the ability to see your address, and, by extension (since everything is viewable on the blockchain), the funds you hold. This does not mean they can access and move your tokens around — for that, you'll need to sign a token approval.