The checkbox should only whitelist the one action and you can get notified about everything else. But yeah, Coracle should be smarter about not authing too much