If we want ecash to have any hope of working out, we need anonymous mints, but anonymous mints are likely to get stolen. Instead, we need anonymous mints that are operated by one of N well-known and trusted parties. Mint operator(s) should take N public keys known to be from N well-known and trusted persons in the bitcoin space, then create ring sig(s) across those N to reveal that they are one of those N parties, but not which one.

Given many long-timers at one point or another had public donation addresses or some other key that is known to be theirs, this should actually be relatively doable, just don’t put too much money in the mint :)