Just masking the number will save UPI data? Why this privacy solution is incomplete

Under the DPDP framework, disclosing a mobile number or full identity creates great liability or risk, hence NPCI Privacy.