I will note that the ETFs are using Coinbase, Gemini, and Fidelity for custody. These companies have been providing Bitcoin custody for years without being hacked AFAIK.
Makes me wonder if coinbase has the whole Dudes With Big Guns layer of protection that you see at e.g. the fed in NY (where all the gold is) or the bank of England (where all the other gold is)