Sounds helpful.
For me the biggest concern is whether ppq can correlate my different chats as I can be conscious about privacy in one chat but if all my chats were correlated, it would instantly give away who I am, as in some chats I ask to help author nostr posts that then can clearly be matched to me. And the credit ID is where see a necessity in the current version for the client to send a linkable ID to the ppq servers. So how about instead of a creditID, use a built-in cashu wallet? Then you would still be able to match my chats from the IP address but the Android app could use TOR circuits per chat ...
Yes. We've thought quite a bit about this option. I even had a call with @50d94fc2…df281d63 on it. Don't want to leave you hanging here, but we'll probably respond in a more long form brainstorming post here coming up soon.