rgUSD deposits are held in non-custodial smart contract accounts. Neither Ranger nor Elemental can withdraw user funds directly.
Strategy managers can allocate capital to whitelisted protocols using pre-approved functions. All management actions are restricted by smart contract guardrails.