The gateways are separate from guardians. I believe the guardians must approve the gateways for their federation but anyone can run a gateway. The gateways are coded in such a way where the guardians and users never have custodial risk with the gateway. I've learned a lot about fedimint from this guide:

Getting Started | Fedimint

This guide has been developed as a community project and is a live document. We would appreciate any feedback you may have and you can submit edits...