Your WoS (or any other LN custodian) account can be hacked as well. Infact even more easier to steal from WoS accounts: you simply log in and funds are yours.

Cashu has no logins. You'll need to hack the actual phone and hack the wallet to get out the ecash. 

 Fair point, but I think the context from @corndalorian was it being stolen from the mint rather than an external threat actor. 

I'm still interested to learn more on it all. What's the best resource? Thanks  

 The mint's risk profile is the same as any other custodian. 

 Good points. 

 Or just hack the mint and mint the tokens 

 https://media.tenor.com/jCrVLxnRUH4AAAAC/jdg-joueur-du-grenier.gif