You have build a trust system because you trust specific developers. Thats why your system is centralized. Your design is similar to a cenralized state, and your developers are a bunch of salary slaves, like the public servants are. Most of these salary slaves do not actualy work. Most of their work is a copy-paste of the work of other opensource developers outside, but you are not aware of it because you are stupid.
You should, at least, pay also the open source developers that your wage-slaves copy-paste from, shouldn't you?
You should not expect for the developers to pay in order to be able to propose. You should facilitate them to add proposals. If not pay them for the proposals they make, at least let them propose for free. You should build an alternative budget system, that facilitates
independant free developers and testers to work, and to compete eachother.
Otherwise this highly centralized development team you rely on, and the linear (and high fee) proposal system you rely on, will be the cause of many bad.
Developer slaves are not like the filthy advertisers. The open source developers know the IP addresses of the masternodes. So they know where to target and where to inject faulty code updates. Whenever an opensource code is copied-pasted by your trusty Dash code team, and whenever you accept updates from this opensource into your masternode system, you may become the subject of this kind of attack. Let me give you an example on this.
DashDrive will be implemented using a software called IPFS. Whenever an update occurs for IPFS, the IPFS developers (whose work has been copied-pasted by your Dash code team without giving a dime) could add the below code into the site responsible to distribute their update:
If (IP = Ftoole's IP) then download the faulty update, else download the correct one.
Both faulty and correct updates will have the signature of the developers. So everyone else in the internet will receive the correct update, but you will have the faulty one! You may say, I will download the update from a proxy. But what if the developers require all updates to be download directly by sites they own, and they send faulty updates to all known proxies? Ban the proxies, this is what wikipedia does, this is what so many others are doing. So why not the opensource developers do the same?
Beware of the slaves, because if the slaves are freed , you are lost.