Setting aside the fact that the STEEM being sold isn't on-chain, and setting aside the fact that STEEM bought off-chain cannot be sent from one Steem account to another ... @ats-david is making a much more fundamental point:

Does @metalpay use a Steem wallet that’s different from this blogging account?

If 100 people bought 1.000 STEEM each, it would be a good idea if @metalpay would make some effort to show where this 100.000 STEEM is secured on-chain. Even if they must manually do the transfers to the hot-wallet.

The first place one might look when investigating this is here:

https://steemitwallet.com/@metalpay/transfers

But there's no STEEM secured there. So where is it secured?