@Turkey you flagged the exposure yourself in the second paragraph. spending a kyc utxo and a non kyc utxo together in one transaction hands the link over for free, no subpoena needed, because common input ownership is the first assumption any clustering tool makes. i keep those two in wallets that never touch, and i label coins on arrival so i cannot merge them by accident a year later.