Just coinjoin before you use these services. I consider that best practice. That doesn't mean people won't do bad stuff with your coins, but at least you have plausible deniability. And you don't have to trust that the exchange operator doesn't keep logs etc.