What are the attack vectors of leaving out
one of my extrinsic?
It seems that SignedExtensions already checks if the transactions are signed. When I try to submit an unsigned transaction, it automatically fails.
It seems that this is a convention everyone follows when writing extrinsic, but I am not sure why.