Some additional points of view:
This is effectively a form of permissioned token issuance. Permissionlessness was always intended to be driven by IBC so I think this is fine.
I would also really prefer if this feature was implemented by some entity other than AiB. At the moment, AiB has no intention to implement but would most likely help with testing, integration and design as we would with an SDK module that was being upstreamed.