So in summary... They want to write a smart contract, distribute tokens, and outsource everything else. Step one, token. Step two, profit. Sounds like most ICO's with a regulatory twist.

I think your breakdown is spot on. The project has the wheels to do big things in the short term but long term success will depend on Polymath's ability to adapt to regulations and innovate in the securities market.