I would say that we dont know until someone cracks the code/algo. After that we can better say how likely it was intentionally made to be circumventable.

Im not sure what do you mean with second question. I dont think sha has nothing to do with tracing transactions. Transactions are public and tracable all the way from end to start.