Building an anonymous central bank digital currency (CBDC) presents security risks – not only to the issuer but to the users themselves, says the Bank of Canada.