Yes it can. For example there's many wallets that haven't released their source code but still allows users to create and hodl their own keys and self custody.

Of course I would not recommend trusting any of those wallets.