I'm building an anchor and instead of keeping a single account and use federation, I'm sending my asset to each customer Stellar account. Today each user is managing their account and they are responsible for securing their seed.

I'd like to remove that responsibility from the users so they don't have to worry about securing their seeds or even knowing about Stellar.

I want to learn about best practices in terms of security and account setup. For example, I already have auth required and auth revocable.

Under this model, users will be holding my custom asset, if they want to hold XLM then they'll have to use their personal stellar account.