Ethereum’s ZK Identity: Privacy Innovation or Privacy Risk?