What’s been really hard to understand about taproot assets is the security model from the end user perspective. Can the issuer of the asset censor transactions? Do end users custody their own assets? Is it permissionless to use? IE what are the compromises from the Bitcoin ethos.