Unlike decentralization, bridge security isn't a spectrum; it's either secure or it isn't. Good engineering design includes preparing for all possibilities. A well-designed system should handle all invariants, but this basic engineering requirement is impossible to meet with trusted bridges. This is due to the main invariant being part of the protocol's design, making it impossible to pre-program the protocol to respond to a malicious takeover of its trusted authority set.
