Lnbits auto generates wallet ids (random hex) which via the logs could be traced to the scan ranges on the Oracle side. It needs it so that it can display UTXOs on the client side. Importantly spend private key stays on the device, so noone else can spend it. For a full total privacy, the solution can be hosted on your own infra, if in doubt what happens to that metadata.
Very much doubt that CEXs will ever implement them, as they need to stay compliant in a jurisdiction in which they operate and SPs make life much harder for on-chain surveillance companies they have to work with.
Thanks for the zaps!.. Got all 6..don't think that my service is configured to send zap receipts, maybe because it'a also BoltCard service.. will speak to Devs to see if that is even possible