Recently, I saw a bunch of people talking about on-chain privacy, saying it's like turning on an invisibility cloak.

Honestly, ordinary users shouldn't expect "complete anonymity"; on-chain addresses don't include your ID card, but once you link your transactions with exchanges, deposits and withdrawals, your regular wallets, or fixed routines, your profile gradually gets pieced together...
It's like wearing a raincoat but also like applying a screen protector—able to block some water splashes, but don't think it makes you invisible.

My own expectation for the compliance boundary is: platforms should do what they require you to do, or else when they block your withdrawals, you'll feel even worse;
Minimize leaving suspicious traces in on-chain interactions, but also don't use obviously red-flagged tools and sources of funds just for "privacy," as most of the harm will come to you in the end.

And recently, with the AI Agents and automated trading wave, the narrative has been hyped up, but no one talks about safety details...
Now I prefer to do more manual confirmations, look at signatures twice, take it slow—it's okay to be slow.
Anyway, getting phished once hurts much more than slippage.