I have a concern about any of the ck Canisters operated by the NNS.
These concerns are both about the security and legality of these canisters. As DFINITY maintains effective voting control over the topics that update these canisters, DFINITY can update them at any time at will in practice. This of course is a central point of failure, and brings up the question of whether or not DFINITY is operating these canisters.
It seems system canisters like ckBTC (I believe it’s a system canister, though I recall some distinction earlier?) and ICP are not held to the same decentralized autonomous smart contract standards as on Ethereum.
I think we should consider the trade-offs of deploying truly autonomous canisters without controllers, or otherwise restricting the unilateral ability to update the Wasm binary.