I haven't really seen this discussed, but wouldn't the ability to add notes to transactions become a privacy concern and a method of easy regulation? I'm imagining merchants being required to reply to payments with "receipt" transactions with notes that could potentially contain sensitive information (i.e. what was payed for, the receiver's mailing address, etc. Even a simple order number could be enough to connect an address to a personal identity.) Am I just being paranoid?