"It's not a bridge, it's a vault"

Cool. Does it introduce counterparty risk?

"Uhm..."

Exactly. Marketing rebrand doesn't change the trust assumptions. If your "vault" needs someone to hold keys, verify states, or process withdrawals - you're still trusting a third party.

Don't let fancy terminology distract from the real question: who controls your funds and under what conditions can they rug you?