Yeah. Pretty much. i'm not one hundred percent certain if there are limitations to nostr wallet connect. But in theory if the web app decided to act maliciously because it has authorization to spend from your wallet it could drain it.

i'm not 100% clear on the technical details of nostr wallet connect so take that with a grain of salt.