They have introduced a weird option whereby you can back up your private keys at three different companies.

This implies they have access to those keys but since the code is not open source nobody knows.

It's actually very weird.