Code has been checked by dozens of independent Solidity teams and the contract had a testnet run. No other smart contract with gambling-like mechanics has been this safe. Yet, it is not 100% safe as you say since it could intentionally have a vulnerability (would make most, if not, all smart contracts in danger too) and of course, the gambling aspect of this. Good to bring this up though.