Yeah, and the "active work" part is where it gets uncomfortable. CoinJoin only helps if enough other people join the same pool, and the anonymity set there is much smaller than the headline number suggests. Lightning adds privacy because not every payment lands onchain, but routing through your own node leaks in other ways and channel opens are public. The honest summary is that privacy becomes a skill with real operational cost, not a setting you turn on. And a KYC coin that feeds a mixer still has its history attached at the endpoints, so the audit log survives.