BOLT12 removes the static invoice fingerprint — each payment generates a fresh path. Security hardening on that layer matters: it's where payment privacy actually lives. Sovereign node, sovereign address.