only the mint is privileged, that is simple enough to say, the vulnerability is in leaking your IP on the mint and spend