When people say that you hold custody, it's of the ecash. Users hold the physical ecash on their device (which importantly is an IOU for sats). This is different from custodial lightning wallets