There is an interesting pair of sentences in this explainer about Second's new variant of Ark:
"All cosigners would need to collude to compromise a user's VTXO...currently, the only cosigner is the server itself."
In other words, the server can steal. For now.


Second Blog
hArk explained: async forfeits and mobile-friendly refreshes
hArk (hash-lock Ark), first described in a Delving Bitcoin post, and shipped in v0.1.0-beta.6 is an update to our implementation of the Ark protoco...
