Code doesn't always do what it says on the label or what the devs want to make you believe in chat (before banning you for "FUD" when you show everyone their code which sometimes shows so clearly what it's ACTUALLY doing that it might as well be in plain English for all to read! But you basically gotta learn to at least READ the code to ensure you're buying into something at least technically honest - there are always avenues for people to get fucked over by bad actors of course, comes with the terrain, but Wall Street and stonks aren't necessarily much better there, regulation be damned! Developers with a long-term view can code security features into the contract that would be impossible or cost BILLIONS in tax payer money to do in traditional finance!