Is "not your keys, not your crypto" dead?