Most of the “scary points” have been mentioned by previous commenters. I have had similar concerns, and haven’t gotten into Iota because of these points.
Personally I feel it is a legit project, though. They have a good team, and a solid plan. They just need to produce results and execute. This goes for a lot of cryptos out there right now.