Cashu is awesome, but wouldn't a Fedimint be more suitable for this use case? If an oppressive government, or unscrupulous custodian seizes or runs off with the the Cashu mint, everyone's funds are gone. With a federated mint, they'd have to nab at least 4 nodes, and the HRF itself could serve as one trusted node, to guarantee the safety of citizen funds.