When I go to L2 Beat and look for L2's I see a lot of risk around centralization.

Arbitrum's riks.

Funds can be stolen if

1. a contract receives a malicious code upgrade. There is no delay on code upgrades (CRITICAL).

These addresses are the participants of the 4/6 Arbitrum MultiSig.

Optimism's Risks.

1. the centralized validator goes down. Users cannot produce blocks themselves and exiting the system requires new block production (CRITICAL).

Funds can be stolen if

1. an invalid state root is submitted to the system (CRITICAL),
2. a contract receives a malicious code upgrade. There is no delay on code upgrades (CRITICAL).

​

Dxdy's Risks.

Funds can be stolen if

1. a contract receives a malicious code upgrade. There is no delay on code upgrades (CRITICAL).

​

Like these L2's Don't inherit nor the security, nor the decentralization of Eth, if I use them, I'm being exposed to smartcontract's security, and the decentralization is usually on a 4/6 multisig, in which the team has a couple of the signatures.

I understand that these are projects in the making, and you can't expect perfection of a project that is not feature complete.

But Being honest does this phrase ("L2's inherit the security and decentralization of Ethereum") even makes sense?

Am I not safer at the moment using a reputable old and secure exchange rather than an L2?