UPI's 21 billion monthly transactions raise the question: shouldn't we be more concerned about how banks and the NPCI protect our metadata rather than just our anonymity? Should I be focusing more on understanding our new data protection laws than on chasing impossible anonymity?

Full anonymity isn't possible with India's KYC-based UPI system. Shouldn't I consider whether privacy-focused options, like virtual accounts or payment gateways, can provide safer partial masking without causing compliance issues or violating RBI rules?