DYOR is good for avoiding scams, but it is useless against hacks and exploits. Some trust is needed and ultimately only projects that do not abuse it will succeed.

We are all beta-testing with our money right now and I do not like that some people lay all responsibility on individuals to "DYOR". We are not all programmers! You can not expect everyone to analyse the code of every DeFi application there is and find every possible flaw.
We need to trust people who build the applications not to fuck up or trust the people who check them! Every exploit and hack on the mainnet is a major hit and I don't see this space maturing in the near future when big projects get exploited left and right for millions.
I don't think that the wining argument for a blockchain is "We are first!". In the long run "We are safe!" will win. If your mistakes cost people money, sometimes even the only money they can spare, you do not get to make many of them.