DeFi protocols should make transaction privacy the default setting