> unless you use a tumbling service like bitcoinfog

Which could be run by the NSA...

It's turtles all of the way down.