How many price APIs are in use? Who's computers do the output of each of those API calls return to? How are disagreements about API output returns between those computers resolved?
I feel like I remember this one, but I do always forget the details because there's just so many methods out there that are being developed, but right this is not the stable sats implementation, I think this is the one that uses oracles right? So then you go into "How are oracles selected" and the answer is usually that its a permissioned federation to which I then point out that this is still counter-party risk, its just counter-party risk that has been mitigated using some method or something.