DeFi was supposed to fix one thing: Web2 → “don’t be evil” (As Google used to say) Web3 → “can’t be evil” But most “DeFi vaults” today are just UIs built on trust.