I was imagining the authentication to part prevents a zaptunnel relay from stealing, not for privacy
Discussion
The zap tunnel can always just give it's own invoices if it wants to steal. You can't really prevent that
couldn’t that be prevented with a MAC from the destination on the invoice?