I'm not very confident in Leo, so I wouldnt sweat about it, its not capable of any advance cryptographic function like crosschain hotswaps, encrypted memo fields (even hive has this), or zk-channels and other advanced transaction or spend functions.
All of the Hive-Engine tokens are vulnerable to a plethora of MitM attacks too, so can't wait to see the poster react to the first chain level security flaw thats abused.
I have been watching and talking, as you said we will see if someone abuses their system or not, because it has pump and dump written all over it just like the splinterlands land pre-sale.
It seems the word "distribution" was the only word that would rub off neutral hear, and different financial terms used to define the ICO would make it seem like insider trading.