Ecash is globally permissioned but locally permissionless. You can rug pull everyone but you can't rug pull someone.