pull down to refresh

Browser is just how you deliver the interface, the back-end can node be completely self-custodial (eg ShockWallet connected to your own Lightning.Pub)
To be trust-less though you'd have to self-host the interface.
In this case Blitz its using a fake L2, which is inherently custodial, so the OPs title is inaccurate.