First of all, congratulations for this post which clearly and simply explains how to use the parameters of the SMTs.

The first is the risk that the smart contracts will have a bug... we believe the idiom "All code is buggy"... With SMTs you get the reliability and security of Steem...

I would like to temper your enthusiasm.
Indeed, if your code is well written, everything will go smooth.
But if there is a bug in the SMTP protocol, which seems likely given the beliefs you express, all the SMTs will be affected, not just those with a buggy contract.

In this case, how can this be mitigated?