of course you can get rugged by onramp, multisig custodians are better than single sig custodians but they are still trusted third parties that can act maliciously or be pressured by government