You're 100% right both are at odds. The longer you wait the more you expose yourself to rug pulls. But if privacy and anonymity is your goal it's better to wait. Good question. I think the only thing a mint knows is if a token is valid (or not) and all ip addresses that interact with it, but not necessarily what specific tokens your ip address is associated with since token creation is blinded if I understand correctly. This FAQ has a lot of our questions in it:

Replies (2)

Thank you. TLDR, need to read it completely later. So how do i have to understand that? You have a wallet or a website you interact with, it displays you the ecash string, it has to have the ability to log that string. I dont say it does but you have the ability to create the client in that way that it can log it, no? Also really funny for me ( from the faq): CAUTION: Choose mints where you trust or know and trust the operator. Use small amounts or immediately redeem tokens or swap tokens to your own mint. Who the fuck says openly: "Hi, i am Joe Schmock, i am your friendly ecash operator running this Mint, i live in 123 Retardvillage. If you want to arrest me, just come by, i have not learned anything from the Tornado cash lawsuit. Apart from that, use my tokens so you can buy drugs anonymously online. Love to you all. " Am i getting something completely wrong here or are they delusional?