Drivechain bips effectively firewall mainchain from any nonsense ont he sidechain and consolodate the attack vector to miner theft. It locks the drivechain funds in a special wallet with no priv keys and to avoid miner theft it takes 3-6 months to withdraw from the sidechain. Its basically the major "flaw" imho its too secure i think probabalistically the 2 week escrow works fine but everyone shit themselves so paul bumped it up to 3 months... Script wise it is relatively simple (im not an expert but if i can understand it its pretty simple) it is commonly argued whenever we get a drivechain, ctv, recirsive covenants or anyprevout upgrade we should just stop for a while bc at that point scalable drivechains are possible(with any of the upgrade, drivechain is the most limited) If we dont get drivechain we might get some more complex covenant thing which i personally dont trust