We knew it wasn't comparable to noncustodial lightning, but I assumed that Spark customers would retain the privacy of a custodial service. That is, I thought Spark would know about balances and transactions - not anyone curious enough to look. This is akin to Coinbase giving each customer a bitcoin address and forcing reuse.