I will divide my answer into two parts:
on-chain must be in self custody!
lightning for the first sats i think it can also be a custodial solution (temporarily). however, I have heard so many positive announcements in this area in the last few days that I also think to recommend only non custodial solutions in the future
