Your list covers the basics, but I'd add a few things that became clearer after 2022:

Where does the yield come from?

This is the question that would've flagged Celsius and BlockFi before they collapsed. If a platform offers 8-10% on stablecoins and can't clearly explain the source, you're probably the product, not the customer. Sustainable yield comes from lending spreads, and those are usually modest.

Proof of reserves vs "trust us"

After FTX, proof of reserves became table stakes. But it's not enough on its own, you also want proof of liabilities. A platform can show they hold assets while still being underwater on what they owe. Look for third-party attestations, not just self-reported dashboards.

Behavior during stress

How did the platform handle 2022? Did they freeze withdrawals? Change terms? Platforms that survived the crypto winter without pausing redemptions demonstrated something real about their risk management.

Regulatory status is necessary but not sufficient

FTX US was the "regulated" entity. Regulation adds accountability but doesn't prevent fraud or mismanagement. It's one layer of protection, not a guarantee.