It survived the day the system was designed for
On Black Thursday in March 2020, network congestion let keepers win collateral auctions at zero bids and left the system several million DAI short. MKR was auctioned to cover the gap, diluting holders, and the auction mechanism was rebuilt. That is the sequence a credit system is supposed to be able to execute, and this is the only protocol in DeFi that has actually executed it.
Revenue that is genuinely durable
Stability fees have paid across every market condition since 2017, and now real-world-asset yield sits alongside them. Both are published on-chain and in governance reporting, which makes this one of the few protocols where the income statement is a matter of record rather than estimation.
The decision that split the room
Moving a large share of backing into tokenised real-world assets reintroduced precisely the off-chain counterparty risk the protocol was built to avoid. It also produced the revenue that funds everything else. Whether that trade was right is the most consequential open argument in DeFi, and nobody will know for certain until a counterparty fails.
Governance
Collateral types, fees and the peg module are set by timelocked token votes, with participation concentrated among large holders and measurable on-chain.