"if the starting utxo is non kyc, the lightning channel open isn't a problem"

ah, so we can agree: L1 privacy is necessary for L2 privacy.

Now, I just want L1 privacy by default.