It's public by default, and users have to explicitly change it to private, something the average user might not know. (Or even expect that their payment app is

It's public by default, and users have to explicitly change it to private, something the average user might not know. (Or even expect that their payment app is set up by default to broadcast their payments to the world)