well, i think just use NWC and lightning. there is plenty of custodial wallet services for users, alby, wallet of satoshi, breez, phoenix. this associates the payments with the user, and can be made private by using a one-use npub or not even broadcasting a zap event just use their LUD16 lightning address (like mine mlekudev@getalby.com
