Ecash is custodial. Can at least be mitigated with federations, but in this case it was a data leak, which is a problem I don’t think federations solve.