Lightning is de facto centralized, with Lightning addresses being dependent on centralized identity schemes in the form of domain names. It’s not only that this makes Lightning ripe for censorship, but provides a side channel for possible surveillance. There’s also so little Lightning activity and most of it is not even remotely anonymous that it makes it a giant autocorrelation hazard. Until Lightning universally adopts Tor or i2p onion support for Lightning addresses, any claim to privacy or decenatrlization is an absolute joke.