Submitted by hickuphh3, also found by shw
PoolStrategy trusts the implemented strategy ps.strategy (Eg. AaveV2.sol) to:
While ps.strategy is assumed to have been scrutinized and  its code verified before adding it as a strategy, and can therefore be trusted, consider minimizing trust between PoolStrategy and ps.strategy, since strategies are themselves reliant on other protocols and therefore subject to external risk.
A simple implementation to checking the withdrawal amounts is provided below.
Evert0x (Sherlock) acknowledged
ghoul-sol (judge) commented:
