The auto-sweep is the part I'd want most. Two details that would make it trustworthy:
- ask for an xpub (or a descriptor) at setup, not a single address, so every sweep goes to a fresh one and nothing gets reused
- make the threshold fee-aware: sweeping 30k sats when fees spike just burns them, better to wait or batch
And NWC as a first-class citizen, with a separate connection and budget per app. That's what most custodial wallets get wrong: one string that can drain everything.
