Immutability is the whole argument
Uniswap's v2 and v3 pool contracts cannot be upgraded, paused or drained by anyone, including their authors. That single property is why the protocol has held enormous value since 2018 and 2021 respectively without a core exploit: there is no admin key to steal, no timelock to race, no governance vote that can reach into a live position. Most DeFi risk assessments are about who could change the rules; here, nobody can.
Liquidity that stopped needing to be paid for
The 2020 liquidity-mining programme ended and the depth stayed. Five years later Uniswap still carries more volume than any other on-chain venue, funded entirely by fees paid by people who wanted to trade rather than by tokens printed to attract them. For long-tail EVM pairs the depth advantage is not close.
What v4 changes about the risk
Hooks let a pool run custom logic at defined points, which moves part of the audit surface from Uniswap to whoever wrote the hook. The core remains formally verified and heavily audited; the pool you are trading in may not be. Read the hook or trade in a plain pool.
Costs and the parts that are not decentralised
Fee tiers run from 0.01% to 1% per pool and gas dominates the cost on Ethereum mainnet, which is why most retail activity has migrated to the L2 deployments. Routing and the main front end are operated by a company, and a governance-controlled protocol fee switch exists — neither touches your funds, but both belong in an honest account of who controls what.