Avalanche Safe: A Stale Approval to an Empty Address

How unlimited approvals to an address that was empty on Avalanche let anyone deploy a sweeper there and pull $7.45M from a 2-of-7 Safe multisig.