'user funds were never at risk' is doing a lot of work in that announcement. five people getting hammered by sophisticated attackers and the worst case was their own losses, not their users'. non custodial swaps just survived the exact scenario they were built for. and the next crew already stepped up with capital and engineers