You just transfered goal posts. Lol. Your original objection was the privacy part being a hoax. But data is transfered and the origin of that data is unknown to the mint. This is accomplished using a DHKE with a blinding mechanism. DHKE is commonly used for https when negotiating a secure web connection.