Its partially mitigated by things like mint operators not knowing whos bitcoin is whose, not having visibility into who sends nuts to whom, and IIRC there are measures to verify mint operators still have the amount of bitcoin as was given to them. So mints can steal, but not with precision and likely at the cost of further operation, I suppose unprofitable mints have an incentive to steal everything before finally shutting the mint down.