Can someone please confirm whether approving an infinite amount of a token on a contract (e.g. a DEX) gives permission to the contract (and/or its owner) to spend my token any time they want WITHOUT my further interaction? E.g. could a malicious owner of a DEX wake up one morning and start spending approved tokens without the user initiating a trade?

What I am trying to understand is, is it necessary to limit the approval only to the amount of the trade (and keep approving 2-3 times per day for trades), or is it fine to just approve max amount once to avoid approving all the time?). Assume that there is no way for us to verify the code and see if the contract has any checks/limitations that require the interaction to come from the user's address.