The biggest attack on self-custody is centralised mining. Your keys mean nothing if a state-coerced mining cartel won't mine your transaction. It’s not an obvious attack and here lies the danger.