Who is this "attacker" you are considering? Some gov agencies?
I personally don't give a shit about any gov agency. Why? Because in order for them to come to me and ask me anything about my BTC, I will ask first under which authority or jurisdiction they came to my door. They MUST prove me they have any authority over my money and how do I use them.
If you say that the "attacker" is some kind of bad actor / hacker / criminal etc, then yes, maybe I must take in consideration more secure ways to hide my tracks.
Govs are NOT a threat for me when I use BTC.
the guy in the video is the attacker (in my imaginary scenario)
So that guy must have access and relations with all participants: Coinbase, Bitrefill, node runners etc.... I really doubt it.