Kind of interesting, it doesn't make the service trustless, because you still have to trust the configuration is as advertised...

But, it's more secure from the operators perspective, less chance of an exploit from user space impacting other users in a multi-tenant hosting environment.. which would ofc look bad for the provider who would inevitably be accused of an inside job

Shame that it's LDK though, would like to study an equivalent LND config.