The Guard contract acts as a proxy between our secure wallet and the user owned Brink contract. Its only functionality and purpose is to dynamically trigger a Brink contracts intercept functions.
It does not have approval to move your assets, only your Brink contract does. The guard contract can simply trigger the function in the Brink contract in case of a detected theft to move the asset to the user specified safe wallet address in the Brink contract before the thiefs transaction processes.