Unfortunately I don’t think the semi-trusted provider idea will work especially in a self custodial setup.

I don’t think this can be fixed for keysend, but with invoices you can use the preimage as proof of payment