CBDC Privacy Risks Exposed