The data-availability dependency is real and worth stating exactly, so let's state it. Operators never hold your key and can't move funds without your signature - that part is unconditional. Unilateral exit works through pre-signed refund txs that pay to a key only you control, and those txs plus t...