Well in this case zaps are sort of meant to be public. On the other side, direct ecash sends over nostr with Minibits use the newest nostr encryption for direct messages (nip-17), so they are pretty private even against the relay operator.