I was told to not touch small amounts of Bitcoin sent to on-chain wallets because it's a phishing attack vector. To find your real wallets and reveal the transactions, when you move them.

It can be an attack vector as you describe. I would keep any onchain zaps isolated from other wallets. It is a privacy issue for those who link real life identity with an nsec. This on chain zap is almost like nostr kyc. For the uniformed zaps can be a legal / tax burden. The arguement made is that zaps are public already, but lightning and cashu make big differences and there isn't dust.

If you're so concerned about privacy of payments between Nostr users: - write the pull request for Silent Payments and - explain to me how I can see this long list of zaps on your profile:

No