0x is a decentralized, non-custodial exchange protocol. The UI could have malware though, which is why it makes sense for various relayers to have a single UI.