After having a look I think the summary is:
- If you have inbound from hub B, you can trustlessly have tokens there. So if you manage to swap balance in hub A to balance in hub B trustlessly, you are still fine in hub B.
- Trustless withdrawals are onchain, not through LN. That could be achieve via an atomic swap.
- It's not clear (as in not defined yet) how to make atomic swaps within a hub or between different hubs atomic.
Another interesting thought is that if a user wants to receive trustlessly though a hub they first need inbound liquidity. They could purchase it from the hub a la LN LSP where they don't buy balance but just a channel where the hub locks up liquidity for them to be able to enforce the exit if they ever need to. A sender just opens and funds a contract with the hub to do this.
