truly decentralized/fully on-chain transaction

Not sure what you mean by that.

then you're basically at their mercy, no?

Yes, it's a custodial wallet. But this isn't the problem here. I don't think anyone expected them to create a non-custodial wallet.