Cas' model is terrible if you don't really trust the person issuing the coins.
It's even worse. Even if you don't doubt Cas' integrity, there are other ways in which your private key may be compromised, such as a bug in his RNG or a gag order from NSA to transmit all private keys to them.