Breez is non-custodial. It follows the same security mode Lightning provides. Only users can access their funds. They are the only one who can sign the transactions required to send/receive funds. Custodial wallets are a different animal. The operators of a custodial service can access users funds and can steal them.