There shouldn't be any counterparty risk. Custodial companies should not be lending your money out. They SHOULD just hold it.
If they are just holding it for you, resilience is about good software, backups and an infrastructure that NEVER goes offline, and never misses a single record.
This isn't hard.