Someone asked me what are the real fears of cross-chain bridges, and whether waiting for confirmation is just a waste of time... I don't want to scare people, so honestly there are only three things: who is the multisig signer, whether the data fed by the oracle is reliable, and whether you're willing to wait a few more minutes for peace of mind.

Multisig looks "decentralized," but no matter how many signers there are, if they are all controlled by the same operation team, it's just the same;
Once the oracle feeds incorrect data (or gets stuck), the bridge on the other side will be confused too.
As for "waiting for confirmation," I now generally prefer to be slower, especially during the period when new L1/L2s are incentivizing TVL, with on-chain arbitrage and transfers back and forth.
Old users complaining about mining, selling, and arbitrage isn't without reason; the more urgent the traffic, the easier it is to cause problems.
Anyway, my own habit is: if I can avoid bridging, I do; if I really need to, I split into small amounts and wait for more confirmations, so that when I review later, only emotions are left.