You take some risk while externalizing the risk of insolvency to your customers.
It’s what every insurance company and bank does.
Or if you don’t want to do that, put it in treasuries or something and take your 1,2,3% of whatever it may be.
Tether could have replicated either strategy, but seems to not have.
They could also have profited from those that lost their keys (it happens).