Agreed, normies companies you trust and your trusted source are auditors and regulators.
But Bitcoin is different while self custody Bitcoin is verified, not trusted.
Bitcoin companies like Xapo bank or Strategy are hybrid models, most of their business is still based on trust, but the Bitcoin part is the bridge to a new paradigm.
Don't trust, verify.
At least the Bitcoin holdings should follow the Bitcoin philosophy.