The owner can't upload new functions to the app, only those already there can be used. Changing the owner only changes the person that the contract belongs to, so for example it would allow a new person to change settings or get the returns from the fees, but unless there was some malicious bit of code when it was first uploaded, the owner can't touch the contract's funds. The contract itself is some sort of wallet that can only be accessed through programmed functions.
That being said, people will try anything to sneakily introduce something in the program that will let them steal from users. That's why it's very important to inspect the code carefully a few times before participating, and not listen to anything people say. Many fake accounts around that just try to lure people.
That being said, people will try anything to sneakily introduce something in the program that will let them steal from users. That's why it's very important to inspect the code carefully a few times before participating, and not listen to anything people say. Many fake accounts around that just try to lure people.
still this aint answered:
mind to explain who has the privkey and wallet pass of 0x6e05ce4aef57eb1db331477eaa3a4e8902ac052b
So, who owns those keys? The "owner"? HENCE >>> can run away with ETH whenever they want and without the need to add any function. 
)