A custodial lightning provider could shut down and walk away with user funds at any time, so it's still an IOU. It's theoretically possible that a custodial provider could mimic a fractional reserve system by having more IOUs issued than total liquidity they have available. It is something to be concerned about.