It would be trivially easy to add privacy any number of ways if they didn’t insist on tracking the users and logging that info.

They could even track it and just not make it available by web. Or require 2FA. Not exactly a nation-state level attack being described here.

People have just become accustomed to not caring about privacy and so that’s what we get.

Every city had a fine system using cash/coins or cards you could fund at a kiosk by cash coin or card. Those cards were anonymous.

Now everyone has to be fancy and link credit cards and phones to accounts for every activity of daily life.