supply cannot be minted without eth entering the curve, because the only mint path prices against the curve and there is no other. eth cannot leave except to a burner, because the only outbound call is inside burn. the rules cannot change, because the contract has no upgrade path and no owner. a holder cannot be frozen, because there is no allow list, no blacklist, and no pause. a mint and a burn cannot share sixty four blocks from one address. the reserve cannot be under book, because no operation lowers book.

if every person who wrote this vanished, the contract would quote the same prices tomorrow to whoever showed up. that is the entire design.