Recently, I see everyone arguing again about L2 which has higher TPS, lower fees, and more subsidies... I’d rather ask: when you jumped over there, who did you actually trust?

IBC sounds very “native,” but once a message is sent, the chain’s light client/validation, the other side’s consensus security, whether relayers (carriers) have malicious intent, or if channel parameters are tampered with, are all on the trust list.
Bridges are even more straightforward: multi-signature, oracles, keepers, upgrade permissions— even “emergency pause” keys are included.
To put it simply, cross-chain isn’t just a one-click thing; it’s about spreading risk across a series of components...
My current approach is pretty old-fashioned: avoid crossing if possible; if I really need to, I first check who can change what in governance, whether changes require voting, to avoid ending up trusting not the chain itself, but a few people behind a button.