The most important question is always ultimately "who controls the keys to the lightning channel that holds the sats backing the ecash tokens?" I know you know this, but just inserting this here for others who may not, and maybe that's part of what you were getting at with your initial post in this thread. Cashu is useful but it is 100% ruggable by whoever runs the node that backs the mint. People have to understand this.