they have custody of three things:

1. The bitcoin seller's collateral
2. The bitcoin buyer's collateral
3. The bitcoin the seller is sending to the buyer

This is true even when you run it locally on umbrel. Robosats still has all of your money.