Lately, I've been looking at IBC and various message passing bridges, and the more I look, the more I realize that the question of "who do you trust for cross-chain" isn't so mysterious: it's not just about trusting chain A and chain B, but also about trusting whether the light client/validation rules are written correctly, whether the relayer is messing with packets, whether the permissions and upgrade keys of the receiving contract on the other side can be changed at any time, and even whether timeout/replay edge cases are properly handled. To put it simply, what crosses over are messages, not assets, but if someone can tamper with or replay those messages, the assets are still at risk. The economic spiral of blockchain games collapsing looks similar: inflation + initial studio funding, then a few mishaps on the bridge side, and the sentiment immediately spirals out of control. First, revoke the unlimited approvals for a few commonly used addresses to prevent a sudden upgrade from causing a major issue.