Bolt12 does nothing for privacy, blinded paths maybe do (debatable) but exist outside of Bolt12 (LND has had them for a long time already) CLINK is better for static addresses, and more private since it's decoupled from the node, allows for HA, and is out of band on a web port. (static addresses are a misnomer because Lighting is inherently synchronous, they're just pointers to a live endpoint) Bolt12 is literally just invoice passing over Tor-like onion messages, fortunately LND has an option to disable them. Since you can't inspect them you can't block non-invoice data, Bolt12 is a vulnerability pushed by the minor implementations who went all in on phones-are-servers. Dumbest thing ever.