I'd bet the (yield) farm that every new zkVM contains critical vulnerabilities.
From experience, they'll have unintentional but highly consequential backdoors. This is not surprising. The math behind ZK systems is extraordinarily complex, and generating proofs for off-chain executions while managing state requires years of specialized research.
The true test? Ask any team if they'd deploy today.