Smart contact development is mostly out of the wild west that you're describing. Development tools and standards means that these cases where funds are directly

Smart contact development is mostly out of the wild west that you're describing. Development tools and standards means that these cases where funds are directly syphoned are now quite rare. In this case this was a intentional backdoor left by the developer. Most modern DeFi exploits take advantage of unintended interactions between multiple smart contracts.