also the security model of bitcoin onchain is "pay and forget" but the privacy model is "pay and think twice... maybe some leaks... what utxo was that..."

For lightning is exactly the opposite. Its the payment layer, a perfect complement of onchain.