I don’t trust Cloudflare generally so I don’t allow them in my network. I don’t worry about censorship because I have a workaround if my provider does that. I am worried about having funds rugged. So my “custodial” risk as you call it, I feel anyway, is pretty mitigated.