When I first got into the space, I really thought "on-chain = anonymous," that wallet addresses aren’t real names so no one would care, since the sky is high and the emperor is far away.

My current understanding is: on-chain at most counts as "pseudonymous," but tracing back is actually quite easy, especially once you intersect with exchanges for deposits and withdrawals, fiat, KYC—compliance is unavoidable.

So ordinary users shouldn’t have too much fantasy: privacy tools are not talismans, and don’t treat "privacy" as "immunity from responsibility."
When I do lending/NFT collateral myself, I care most about not making asset sources and authorization records a mess, or it’ll be even more troublesome during liquidation/disputes.

Recently, hardware wallets are out of stock, and phishing links keep coming…
Honestly, security awareness is more life-saving than "on-chain privacy": if you can avoid signing, don’t sign; if you can give fewer authorizations, do so; layer your wallets, don’t find it troublesome.
That’s all for now.