Actually, everyone understands that the APY on the aggregator is just a facade; the real issue is who they are actually playing with behind the scenes and whether the contracts have proper security measures.

These past two days, I’ve been drinking tea and reviewing the calls of several vaults; on the surface, it says "auto-compound," but half of the returns actually come from incentives on lending and borrowing, and the other half is routed through a market-making/OTC counterparty.
If the contract terms change, you’re just left staring blankly... Not to mention sometimes there are strange fees mixed in.

Recently, there have been complaints about the lag in on-chain data tools and tagging systems, and I agree:
You see the "security protocol" tag and feel reassured, but if the underlying strategy contract changes address and the tag isn’t updated, by the time you notice the returns suddenly change, it’s already too late.
Anyway, when I look at an aggregator now, I first check which contract the money is going into and who holds the permissions, then consider that APY—taking it slow feels more reliable.