Elephant in the room: all Lightning infrastructure is centralizing around 1-3 companies that offer zero privacy.
Yes. And that's enough to de-anonimize senders, even if they run their own LN node.