Is utreexo dangerous?

Just installed Mandacaru on an old Android phone and got it running with Utreexo/Floresta. Quick question for the more technical folks here: how do you think about the trust model of Utreexo compared to a full node? My understanding is that Utreexo nodes still verify everything cryptographically, but they depend on bridge peers to provide UTXO proofs. So a malicious bridge can't deceive you, but could deny service. Is this a fair characterization? Any other risks I should be aware of?