What do you mean? The attacker could just zap from a new nsec per zap. Maybe I’m missing something though. I thought lightning payments were kinda sorta anonymous like that.