Accepted answer
Whatever the method, keep your own records — they are what you will need if anything needs resolving.
Merchant data breaches are the realistic exposure for most people, and the mitigation is minimising what the merchant holds rather than choosing an exotic payment rail.
What a cold pack actually holds, and for how long
| Packing | Ambient | Time below 10 °C | What that means on a 12-day lane |
|---|
| One phase-change pack, thin-walled box | 25 °C | 1–2 days | At ambient for roughly ten of the twelve |
| One phase-change pack, thin-walled box | 35 °C | under 1 day | At ambient for essentially the whole lane |
| Two packs, insulated liner | 25 °C | 2–3 days | Buys a day; does not change the conclusion |
| Lyophilised solid, no pack | 25 °C | not applicable | Dry powder is chemically stable at ambient |
| Anything in solution | 25 °C | not applicable | A different risk entirely; hydrolysis proceeds |
A liquefied pack on arrival is the expected outcome rather than evidence of a problem. A single-use logger, not a heavier pack, is what turns this from speculation into a record.
Any method routed through a regulated exchange creates identity records at that exchange under standard customer-identification requirements, which is where most linkage actually happens.
Customer identification requirements at regulated exchanges create the identity linkage that makes on-chain analysis effective.
The caveat is that legal exposure varies enormously by jurisdiction and nothing here is legal advice.
Public chains are permanent and searchable. Pseudonymous is not anonymous.