If they want to cheat then it is definitely possible, hence why you need to trust them. But at some point, it won't be sustainable and if there's a huge withdrawal request they'll get a huge problem. It is possible that they do something and get away with it though, so it is safe to say that you if you don't want to get into trouble, might as well use a DEX or withdraw asap.