The ecash tokens themselves are completely worthless IOUs without the Bitcoin behind them, so even if I can take custody of my ecash tokens, I have 100% given up custody of my sats to a third-party.
100% correct.