As long as those pesky relays don't trick you :)
Say you minted new token but failed to publish new state.
Then user logs out, nukes browser storage. Bad luck.

I realized it is actually hard to get ecash Self-Custody right.

Especially with nip61