When DeFi folks talk about how wrong it would be to apply BSA surveillance obligations to their activities there's too much talk about impossibility or the rights of the developer and not enough about the rights of users. 1/