I don’t 100% disagree with him. Like he said, it is an additional risk. Assuming no supply bugs, you can validate what is published.

I just disagree with him that it’s “near zero probability”. This already did happen with Bitcoin and we only caught it because we weren’t assuming zero supply bugs. Bugs happen and we’re talking about the future money supply for all humans.

Edit to add: and BTW it’s not just cryptography bugs (rare), but anything related to validation (like value overflow)