No, I think it's far from perfect. I think the database should be distributed into some kind of DHT structure, and I think anonymity should be far stronger, and the default. (Ie. diametrically opposite to your third desire.) I guess I agree with your first two points, but have no good ideas on how to achieve them. (I certainly would not sacrifice my principles simply to get 99% adoption among merchants.)