If any client takes custody of a user's private key, it deserves backlash. It's the worst kind of trust model; it's irreversible, and you're trusting them forever.

Imagine storing your sats in WoS once, and they gain the power to withdraw any amount of Bitcoin from your wallet for forever, whether you use it or not.