It sounds like the provider knows everything, though... knows who it provided the tokens to, knows who consumed them. So where's the privacy shielding between m

It sounds like the provider knows everything, though... knows who it provided the tokens to, knows who consumed them. So where's the privacy shielding between me and the token provider? If that provider is likely to be Google (as I'm sure they plan), then there's no trust there to begin with. (Apologies if I should go and read the fine docs -- and in truth I probably should -- but I lack enough hours in the day for something that is a bit peripheral to my interests, so must rely on my co-HNers to condense/explain these things. Upvoted with gratitude.)