Confirming basically everything I already suspected about IOTA -- don't trust anything crypto related that's not written by a professional. "You're gonna have a bad time." [Edit to add this plug for Zcash! Made with real cryptographers ]
One priceless line from Ethan Heilman to support that observation: Probably best not to use informal stackoverflow answers and Wikipedia for understanding the security of your system. Yowza.
Which is the real "yowza" imho.