there is no "bitcoin balance" in the way you're thinking. on the base layer, paying for pizza would only leak that one utxo — which is not all the bitcoin i own. on lightning, the payment simply fails if i don't have enough on my side of the channel — it's enforced by cryptography, not trust