zkAPI's privacy protections are too limited to secure sensitive AI interactions