> And since it's a public blockchain, you know exactly which token went to whom.

You don't (well, shouldn't) know with Z-Cash/Zerocoin