From your second link a commenter actually steps through the flow: https://news.ycombinator.com/item?id=21116981
It seems pretty clear from that description that the user consents to signing...
I think it’s annoying to see wallet and chat when all I really cared about was a discoverable public key, but it doesn’t appear to be a backdoor signing method.