In a badly structured fund the manager holds both powers, which means investor protection depends entirely on the manager's honesty. In a well-structured fund, withdrawal from custody or from exchange sub-accounts requires instruction from the administrator or the fund's directors under documented controls, typically to whitelisted addresses or accounts only.
This single control is the most important answer in operational due diligence, and the one allocators verify directly with the custodian.
