Being uncovered to good contract safety vulnerabilities is totally regular: you already get that threat when interacting on the L1 anyway.
L2s which have accomplished their options are designed in order that, even when they go offline or censor your transactions, you possibly can nonetheless get your funds out of the L2 your self.
The largest vulnerability of L2s, proper now, is upgradability, particularly as a result of they nonetheless are implementing a number of new options. And plenty of L2s have not but absolutely carried out their pressured handbook withdrawal, but it surely’s exactly what a few of them are engaged on.
One other downside of L2s is operators can censor your transactions, however that’s at all times an issue, even and most of all in centralized “respected previous and safe exchanges”. Solely decentralized ones are okay in that regard.