As someone was saying on Twitter, you can legally buy guns in US, but end-to-end encryption is a big no no, because end-to-end encryption is umm...dangerous? It reminds me of another stupid law meant to ban body armor.
"Private" is not the best word to use here. Gun shops are required to maintain logs. Outside of that, transactions between individuals aren't involuntarily logged (the poorly named "gunshow loophole").