The trust model is the tell. "Bitcoin-connected" custody is still custody — your coins move at someone else's discretion, not yours. Mt. Gox didn't fail because it was careless. It failed because the architecture allowed it to. Spark's architecture allows the same things. Self-custody isn't paranoia; it's the only way the system property actually holds.