Five layers, and only one holds the money
Only the vault holds money. The two layers above it move instructions, and the two below are where the vault sends money to earn and takes it back.
The bottom layer is the one DeFindex does not own, so its risk is its own. The audits of those protocols are listed alongside ours.
From your side it is a few API calls. Your app shows one number, your users put money in and take it out whenever they want, and you charge a fee on what the vault earns.