Read about TEE and the security trade-offs.

When the mint shuts down, who gets the sats?

For my own personal definition of rugging, the attacker need not receive the funds. For example, if a darknet market is shutdown by cops, all the users with funds on it are rugged. The operator of the market doesn't need to be the recipient of the funds.