Correct, caution is appropriate. However, if you can verify your ecash wallet's crypto as sound, you can be pretty sure that as a user of that wallet you'll benefit from the privacy.

If you know that the protocol is safe and you can verify the code you're running in your wallet, you don't have trust the operator for your privacy.