Absolutely RE vulnerabilities and iteration
As for payments, I don’t think it’s realistic for companies to accept the IOUs especially when users can burn them to pay over Lightning. Maybe it will happen though with some business accepting tokens only from select trusted mints, but I don’t see it being widespread