The mint (or data center) operator can power off the mint so it's definitely ruggable The non custodial part though does have some technical nuance. And of course this approach ought to be much safe...