The first scenario is far cheaper but runs the risk of rsETH depegging an estimated 15%, while the second is costlier but better protects Ethereum mainnet and concentrates losses at the layer 2 level.
Aave risk manager models 2 bad debt scenarios from Kelp DAO exploit