Well if they run the server and it’s hosted in their infra, I don’t see how they aren’t able to “get into the server”? They can SAY they won’t do it but at the end of the day THEY CAN.
Imo everyone selling “run your LN node on my infra and keep your keys noncustodial” are not being straightforward.
Again, unless I am missing something here? I’d love to be corrected.