Yes, I was reverse engineering what Damus did for Amethyst back in the days. The nip mentions it but then says:
"Zaps can be extended to be more private by encrypting zap request notes to the target user, but for simplicity it has been left out of this initial draft."
Since 3 years.