Does it mean that privacy assumptions strongly depend on how the LSP (in this case Voltage) handles those information (IP, utxo, pub key etc.)?