I don’t trust Cloudflare generally so I don’t allow them in my network. I don’t worry about censorship because I have a workaround if my provider does that. I am worried about having funds rugged. So my “custodial” risk as you call it, I feel anyway, is pretty mitigated. 

 Fair enough. How would that rugging scenario play out? How would a fully vps hosted node expose you to rug risks?