Only idiots are communicating their addresses unencrypted - PGP encryption for addresses is standard. So the only way for your address to be matched to your dark net activity is if a.) the person you are buying from gets busted and b.) the person you're buying from doesn't destroy the address after they ship the package.