although risky, mintable doesn't always mean something bad. it is important to know who owns the mint function. saying this as a dev