wow yet another spot where an authenticated async relay protocol would fix the problem
Discussion
Eh, not the same benefits. This give you some privacy on lightning by not revealing your actual lightning node and can be later reworked for async payments so the user doesn't need to be online.
I was imagining the authentication to part prevents a zaptunnel relay from stealing, not for privacy
The zap tunnel can always just give it's own invoices if it wants to steal. You can't really prevent that
couldn’t that be prevented with a MAC from the destination on the invoice?