Stripe is where many companies take payments. Once you connect it, your assistants can read your customers, subscriptions, and charges to answer questions and prepare reports. Anything that moves money stops at your Approve.
A restricted access token with read permission is enough for every ability except creating a charge. If you never want a charge created, never give the token write permission.
Reading customers, subscriptions, and charges happens on its own.
Creating a charge always waits for your Approve. Charging someone is a step you should always see first, so it does not depend on your Auto-approve choices in Settings.
Approvals explains how the request reaches you and what you see before you answer.