Looks like a very clever and simple solution for private payments. What are the biggest potential issues/flaws? Scalability?