Lightning is getting easier to use every day, leading to a lot of exciting services being built on top of it as they should be. But while better documentation and API bindings make it easy to use for even inexperienced developers there are still a few rough edges to be aware of or else one may become the target of attackers. One of these will be the topic of this article: fee handling for custodial lightning accounts.
Even though I agree on a philosophical basis that this shouldn't be an article I have to write because people are supposed not to trust custodial solutions, this is not the reality we live in. For a variety of reasons including UX, maintenance effort and available know how custodial solutions integrating lightning are often preferable, especially for small amounts of money.