Does ledger help protect against funds being drained from bad actors on contracts with infinite token allowance?

Is my friend getting scammed