Couldn't they have done something like how liquid works and had the token pegged to bitcoin? 

And aren't you trusting that the gateway doesn't do anything with your ip?