The word "custodial" has unfortunately been abused a lot recently.
Yes, both CoinOs and Rizful should be considered "custodial".
There are lots of other apps which are claiming to be self-custodial -- WoS, Blitz, Breez, etc. etc. -- which we argue are not really "self-custodial"... most basically because you are dependent on one centralized API. (BTW, this centralized API creates serious surveillance/privacy risks.)
Anyway. If you want fully self-custodial, we are HUGE proponents of Alby Hub. Run Alby Hub on your own machine and you are running fully self-custodial Lightnuing. Or, if you really want to get serious, follow our guide to running LND: 

Set Up A Lightning Node | Megalith Lightning Docs
Ready to run your own node? Let's get started!