Yes and yes. This is the big pitfall i see so many ignoring - the real challenge if you're trying to interface with the outside world is establishing what the internal token means in the outside world without depending so heavily on a centralized weak link that the decentralization of the blockchain's maintenance is pointless. If the actors in a system don't trust each other enough to make changes to the database unilaterally, why would they trust that the other actors aren't lying about their on-chain/off-chain holdings?