If it helps you to think about it, you can emulate CTV (poorly, with caveats) with presigned transactions that have always been possible.

It's fair enough to be concerned about unknown-unknowns but I'm asking for specifics in this thread. (I'm pretty convinced it's safe after a couple years of thinking about it but that's just my opinion)