I read a piece that says privacy tokens do not provide complete privacy; could someone explain that to me? Thank you.