Those are very different things, and from Europe's approach to the GDPR, I think it is the first.
The former is almost a given that it will in fact be possible. The latter was raised as an added benefit of the system either by BIS's Carstens or IMF's Georgieva -- can't recall with certainty currently. Both are promoted as weapons against black markets, corruption, and terrorism.
Yet those who are willing to give up liberty for safety, and all that.
The control of privacy should be in the protocol and not in the hands of the authorities, if there is going to be a trust built around it. Otherwise, we have what is there today, without the anonymous cash element.
There are different designs today to address this concern, see e.g. the one from Bank of Canada, as one of the frontiers of privacy for citizen: https://www.bankofcanada.ca/2020/06/staff-analytical-note-20...