For vaults or SMA (Separately Managed Account), there are only two ways: 1. You have smart contracts and oracles to add safety controls but increase the smart contract risk 2. You give full control on a EOA (SudoPolicy used by @glider__ ) and hope for no backend fuckups but you have a lot less smart contract risk (but you still have some) Happy to hear if you have safety features beyond "it's a KMS". That is to me the difference between being non-custodial and being custodial. And being non-custodial is harder. True. We can disagree of what is the biggest risk. But some offchain code having full control on the funds would not help me to sleep at night.