Comment by iamniels

On top of that, the user paid for those tokens, so if there is an owner, it should be the user, not the provider.