Building self custody projects can be pretty frustrating because you're (hopefully) not ONLY thinking about how to protect your users from attackers.

You also have to think of the user as an attacker, consider every possible stupid thing they might do, and build guard rails to mitigate footguns.