I've looked into the federated model of the liquid network (I trust Adam Back), but I still am trying to wrap my head around the trust/ privacy trade-off of fedimints.

What is the worst/most malicious thing a "mint signer" could do?