they have custody of three things:
  1. The bitcoin seller's collateral
  2. The bitcoin buyer's collateral
  3. The bitcoin the seller is sending to the buyer
This is true even when you run it locally on umbrel. Robosats still has all of your money.