You're right. So it's blocking because you need to know how to protect stackers, but regardless, there is still a single point of failure on every path (even if there are multiple paths, the failure is still singular within each path, and user mitigation is required to overcome it, which is as bad as custodial)