Isn’t the obvious leak here that the exchanges are cooperating with authorities and telling them time, amount and user details of every monero deposit/ withdrawal?
If the sender or receiver of a transaction shared details of the transaction with others, is not a failure of the protocol.