Spark does not qualify as a second layer because a malicious server plus a malicious prior holder can collude to steal the coins any user receives via a swap (which is the common way to receive coins on Spark), if the malicious parties prepare their attack in advance. There is one caveat: if you go ...