When a single private key can drain the protocol by design - it's probably not DeFi, it's CeDeFi. And that's ok, but it requires DevOps being very well organized. I prefer building real DeFi