zcash has a good approach of having both private but unauditable and public but auditable options

if the private TX cryptography was broken, only the total amount that was converted from public => private that can exit from private => public and therefore the supply impact is limited