Yes, 95% of lightning users are on custodial wallets and LSPs that can see everything.

It's used as a glorified Paypal for most (and worse because almost no adoption in comparison) 

 Which may, or may not, lead to future issues. Is the Czech Republic working on a CBDC? 🤔