This is misleading. Different people asses risks differently. I have extremely little insight into the existing financial system: does my bank really have good security over their servers? Do they practice recovery on a regular basis so that there’s confidence my money will still be there when failures do happen? Will the IRS make a typo that results in my bank assets being frozen?
I have zero insight into that. A lot of people seem to take it foregranted that existing bank systems are infallible. I have no way to assess that beyond the test of time (which is still worth something).
Cryptocurrency lending platforms have similar types of risk: what’s the feasibility of the thing being hacked. For most of these, I can actually do a very rough assessment because the code is public, the team is usually public (and has a track record) and there are probably some security audits by groups who either are or aren’t yet reputable. I have more tools for assessing risk.
So yes, some people will judge the risk of the 0.1% system to be lower than the 4% system. Some people will judge the risk to be the reverse (more practical if you substitute Compound/Aave for the 4% system). But you can’t separate the risk of a system from the users of that system so cleanly. There’s a very large subjective component to it.