The gateways are separate from guardians. I believe the guardians must approve the gateways for their federation but anyone can run a gateway. The gateways are coded in such a way where the guardians and users never have custodial risk with the gateway.

I've learned a lot about fedimint from this guide: https://fedimint.org/docs/intro