Yeah, government licensing. I think even at medium volumes it's more or less inevitable in most places just because of what a mint actually is. I actually think it makes sense to get on top of it, start working with regulators in friendlier jurisdictions, educate them and work towards preferential licensing schemes that'd keep the door open for Nostr apps with built in mints that could go viral (provided the app entity registers there).
KYC for AML I think could be handled via the app that gates the mint and in such a way that a degree of privacy is maintained. Perhaps by only KYC-ing mint users that have hit a certain withdrawal-over-time threshold (and they'd be well warned), and other risk-based models. Would depend on the mint proving to the regulator that it's air-tight gated by the app that houses the mint.
But overall I feel that Cashu has huge potential for businesses, not just family mints and such, and if it's possible to get to a workable set of trade offs then why not.
Initial thoughts, plan to dig a little deeper next few weeks.