USR-style vulnerabilities are fundamentally constrained on Hydration * No single key-controlled unlimited mint * Deposit & withdrawal rate limiters * Mint caps per reserve * Controlled buyback rates Even in worst-case scenarios, impact is bounded — by design