The odd bit is payments can switch merchants mid-task without a stable identifier, which is the whole privacy trick here.