I've watched smart people get rugged on XRPL because they "did their research." They checked the website. Read the whitepaper. Looked at the chart. Got wrecked anyway. DYOR isn't bad advice. The problem is it assumes research tools exist that actually don't. Googling a token name and checking if it has a Twitter account isn't research, it's vibes. Real risk lives on-chain: issuer account age, whether they can freeze your funds, whale concentration, empty trustlines from airdrop spam. None of that shows up in a whitepaper. People push back and say "just be careful." But careful with what, exactly? Your eyes? That's the gap. The advice exists. The infrastructure to act on it largely doesn't, or didn't. Building Rhyzlo taught me this directly. The hardest part wasn't the scoring logic. It was realizing most XRPL users had no way to check if an issuer had global freeze enabled before adding a trustline. That's not a knowledge problem. That's a tooling problem. DYOR only works when the tools match the complexity of what you're researching.