RE: How the issuer of an IOU/UIA can transfer assets back to himself

[cm-steem]

I've certainly been taken aback by these permissions being enabled on several large UIA.

Comments

[xeroc]

Please distinguish between permissions being available from being set.
Just because the permissions are available doesn't mean that the issuer is going to use them. Only if they are set, the issuer will probably use it for some reasons.

And then, of course, the blockchain is public and everyone can see whats is going on. A big exchange misusing this power will hurt itself big time.