From the article: "The website asked for permission from a Phantom wallet, and it actually drained all SOL from their wallet." It's possible that he didn't spend all his SOL on this project.
On the other, you go on some website, click "enter app" and are prompted by a crappy pop-up to authorise the website spending all your money. And if it's Etherium, you have to pay like $50 just for the joy of doing that.