By setting up his account, the user distributes the conditions for storing assets based on their needs. to access the hot zone, a request from the user account is enough;
access to the warm zone will require a user request and additional confirmation with a key from the customer service department;
to access cold storage, you need a customer request, a customer service key, and a manager key. Also, any user can assign additional security steps (for example, when placing especially large assets) - personal presence, additional signatures from trusted persons or organizations, etc.
All this in addition to standard KYC, 3D secure, withdrawal whitelists and other asset protection methods.