Who is this "attacker" you are considering? Some gov agencies?

I personally don't give a shit about any gov agency. Why? Because in order for them to come to me and ask me anything about my BTC, I will ask first under which authority or jurisdiction they came to my door. They MUST prove me they have any authority over my money and how do I use them.

If you say that the "attacker" is some kind of bad actor / hacker / criminal etc, then yes, maybe I must take in consideration more secure ways to hide my tracks.

Govs are NOT a threat for me when I use BTC.