Bxrd.app

Since the CLINK keys are decoupled from the Lightning node you can roll them without losing channels, you could have multiple for different apps/users/use-cases to break correlation, or use blinded paths to obfuscate the destination node

Relay observers can see DM metadata of course, but since they're scoped only to these ephemeral kinds there's little to glean particularly where the payer is typically using an ephemeral key.

Bolt12 does nothing for privacy, blinded paths maybe do (debatable) but exist outside of Bolt12 (LND has had them for a long time already)

CLINK is better for static addresses, and more private since it's decoupled from the node, allows for HA, and is out of band on a web port.

(static addresses are a misnomer because Lighting is inherently synchronous, they're just pointers to a live endpoint)

Bolt12 is literally just invoice passing over Tor-like onion messages, fortunately LND has an option to disable them. Since you can't inspect them you can't block non-invoice data, Bolt12 is a vulnerability pushed by the minor implementations who went all in on phones-are-servers. Dumbest thing ever.