Chainlink's default 16-operator committee provides sufficient security for institutional transfers