`writeOff()` can erase all protocol debt when the last borrower is written off (unbacked COIN)

Redemption accounting can become undercollateralized: `redeem()` pays out collateral without conservatively redistributing borrower shortfalls, breaking collateral conservation and locking withdrawals