It’s slightly shocking to me that the on chain credit card companies eg gnosis don’t run any type of onchain privacy protocol like it would be easy eng wise and the users are already id-ed at issuance/PoS so it seems like low compliance risk