You could also do musig for payments and mint unilateral exit and only script path for user unilateral exit. Maybe that’s the best of both worlds.

Simple stateless backups and minimal onchain footprint in the optimistic best case. Worse privacy and more onchain use on the rare event that the mint disappears.