I think the other way around, since security will depend on the smart contract, if it is well done or not. since a 3rd party does it. They can also change the rules of the game as AXIO did, which started with a 100% pool when the ISPO ended. They said I don't give you anything. I'll give you the ada back and if you want them, complete this KYC. They changed the rules of the game and since they handle the contract they could do it without consulting anything