All defi is a scam, yes. If your bitcoin is not in your own wallet, IT IS NOT YOUR BITCOIN. If you have to login with user/pwd that means is just an account, that means, is not yours.