what is worse is that meshtastic is not encrypted by default and can't do arbitrary encrypted messages. which is crucial, because there are no cashu invoices, the token is the money. whoever sees it can spend it (there's a way to lock it to pubkey, but you need to exchange the pubkey then).

so sending the token has to be private and exchanging the token for the fresh one (to prevent double spend by sender) needs to be totally encrypted.