Actually, everyone understands that the so-called "privacy" on the chain is more about defaulting to no one watching you, not that you're truly invisible. I think there are only two expectations from ordinary users: don't treat the chain like a social circle posting locations, and don't treat compliance as air. If you want to be a bit more anonymous, you can, but once it involves deposits and withdrawals, fiat channels, or even major exchanges, you'll ultimately be asked to clarify "who I am." To put it plainly, this is a boundary.

Recently, cross-chain bridges have been hacked again, and oracles have been acting up, and suddenly everyone has learned to "wait for confirmation." I actually think this is quite healthy: on-chain transparency = auditable, and also = traceable. Don't expect to wipe everything clean with a single click when something goes wrong. My approach is pretty simple: separate frequently used addresses from those used for tinkering, do small tests before cross-chain transfers, and treat on-chain activities as logs that will eventually be reviewed... that's how I do it for now.