Spark is better described as federated than non custodial, but it's not pure custodial in the sense that just one provider can rug you, it would take collusion from multiple parties, which is possible but lower odds than a single custodian