I'd venture to assume that the biggest problem with custodial solutions isn't necessarily an internal rugging but the fact that its a central point of failure. Your custodial funds are just one password away from being compromised. 

nostr:nevent1qqsx58yhphprmxf7eajdl95cz8yr0avc2jvfwgkwdsjthev6sgavufcpz3mhxue69uhhyetvv9ujuerpd46hxtnfdupzpvkkwr098vnkj8qvxsqzykm9cddzd5rqjw7vg86gllr3uzg8l822qvzqqqqqqyzkglmj 

 Or one rouge employee away from being compromised. Or one social engineering attack away from being compromised.