I see, so you're supposed to produce a document doxxing your entire stack to be tendered upon audit.
This is better from a privacy perspective because it distributes the honeypot. The end game is no different. They will just audit everyone who paid a large amount of crypto capital gains. Now they have their handy dandy list of easy marks doxxing their entire stack, crucially including all the coins they didn't sell.