Is PayID look-up no more a breach of privacy than a phonebook?