Yeah, and all of that metadata handling can be properly moved to someone you either trust more or someone who doesn’t have enough info to connect it to you. DNS over https, VPNs and TOR exist. All of these systems are secure, but can be compromised by someone with direct on premises server access, if they’re skilled enough.
Yeah, if the first argument is “Linux does not have the safety culture”, the first thing should be for the question of “do the current offerings have it” to show up.