tohrxyz on Nostr: but they dont custody it, do they? afaik they could only know xpubs and therefore ...

but they dont custody it, do they?

afaik they could only know xpubs and therefore addresses and transactions, am i wrong?