Using a single trampoline node -- like a private invoice -- identifies the last PUBLIC hop in the route. It does not identify the final destination. And -- critically -- there is no centralized server like LightSpark who also gets to gobble up the I.P. addresses associated with the receiver.