Built by people who use it.

Anything that moves money or changes what customers are charged requires two distinct people: one to propose it and a different one to approve it. That is enforced by the systems themselves, not by convention, so a single account cannot both make and bless a change to a fee, a payout or a refund. Every decision of that kind is recorded with who proposed it, who approved it and why.