Just avoid CEX's, and follow basic data OPSEC, and 99.9% of your problems will disappear. I've looked over enough dockets prosecuting crimes involving BTC in some way (there are not many) to know the dominant recurring theme is that a CEX was used somewhere along the chain of custody—foreign or domestic–and OPSEC 101 rules were broken. These crimes BTW are very difficult to prosecute, time consuming, and expensive, even when someone does use a CEX, because it isn't enough, they still need access to a physical device (phone, computer, server), or access to an email, cloud, or wallet, preferably one of each. This is why they concentrate on major cases, ones that make the news.
BTC/XMR atomic swaps or BTC/XMR DEX's are great for small volumes. They're generally not viable options for those that need them the most—because there isn't enough volume, wether that's the ransomware hackers, the big darknet market vendors, Chinese producers of fentanyl precursors, or money launderers. Mixers have historically provided volume en route to Eastern exchanges that provide the ramps to sturdy tax havens. Lightning will eventually change all this, so will a circular economy, so will the data set of L1 when its global volume increases.