Yep, the end user can still self-host a signer without trusting their key to a provider hosting the application widget and management interface