with spark ...

you trust: 1-of-{ Lightspark }, because they're the only operator
you can verify: pre-signed exit transactions, but not whether they've deleted keys
failure modes: availability, censorship, privacy, griefing, and yes, potentially theft