In reply to Chris Meggs.

Apple claims that tokens are unique per transaction. In that case they cannot be used to identify anyone and that is what merchants are complaining about.