~
The fourth point doesn't sound like users mistake, DeFi projects for example depends on its code and if something happens to the code it's over, even if they manage to work something out the damage will be too high to handle, also it's easy for scammers to evade arrest through decentralized projects, to me it seems like dex is causing more damage than CEX
Trusting DeFi scams is already a big mistake by the user before that token has any "issues with the code", in other words the moment that the user decided to hand over their money to receive a completely useless token they made their mistake.
In addition they are trusting a platform that is known to have numerous issues including bugs in it and mutability of its blockchain.