Sounds helpful.
For me the biggest concern is whether ppq can correlate my different chats as I can be conscious about privacy in one chat but if all my chats were correlated, it would instantly give away who I am, as in some chats I ask to help author nostr posts that then can clearly be matched to me. And the credit ID is where see a necessity in the current version for the client to send a linkable ID to the ppq servers. So how about instead of a creditID, use a built-in cashu wallet? Then you would still be able to match my chats from the IP address but the Android app could use TOR circuits per chat ...