Lately I've been looking into IBC / message passing / various bridges, to be honest, with cross-chain stuff, you need to figure out who you trust first: will the source chain rollback itself, does the target chain have finality; who is running the "messenger" in the middle (relayers, validators, gatekeepers), are they working automatically according to rules or can someone manually change things; and then, is the light client / proof verification actually done on-chain, or are they just stuffing "I guarantee it's fine" into multi-signatures / admin permissions. Multi-signature isn't slow; it's about blocking errors at the door, but the premise is that you can see the permissions and processes, otherwise you're just gambling on luck somewhere else.

By the way, recently privacy coins, mixers, and compliance have been heated debates. I'm actually more concerned about: once something goes wrong, who can freeze assets, who can blacklist, who can roll back messages—whether these component boundaries are clearly defined. Anyway, I'm just a user who likes to nitpick, so before cross-chain, I ask three questions: who can change the rules, who can stop the service, and who takes the blame if something happens.