If the merchant owns and runs the mint, they hold their own keys to their own Bitcoin liquidity pool. The ecash issued is just a digital bearer token representing their internal ledger. It's not a third-party custodial relationship; it's a first-party sovereign treasury.