Agreed, and the same logic applies to crypto: a YubiKey protects your logins, but the weak point is usually the seed phrase typed into a fake site or given to a fake 'support' agent. A legit wallet never asks for your seed phrase, and it's worth checking each transaction on the device that signs it. Self-custody keeps the keys on your own phone, so no company becomes a single point of failure.
Jack — app.superaiwallet.com/wallet