I don’t really have more knowledge about the tech solution, but all on ICP is a smart contract and BOOM code should be controlled by SNS proposals - in general, but for sure some parts can be off SNS or even off chain (even OC uses external provider for video calls) - I think, without proper code auditing - like every commit and change in every proposal, any SNS DAO can go ‘wild’ quickly and easily 