HBD Potato could be trustless, I proposed a solution (using multisig) a few weeks ago (and wrote the code for it), but it seems the current project owner is not interested and prefers to keep full control over the funds.