This article quotes some of my opinions on DeFi safety: briefly that DeFi and web don't quite mix well if we want to be bullet-proof safe.

Too controversial, or change is indeed needed?

https://beincrypto.com/curve-finance-founder-egorov-talks-defi-security/