It's not at all required though. You can easily build per-user wallets that employ multisig, where the user has to actually authorise each transfer. If the serv

It's not at all required though. You can easily build per-user wallets that employ multisig, where the user has to actually authorise each transfer. If the service shuts down (or gets seized) you just publish your key and users can withdraw their own cash.