In fact, all the AML analysis tools I know of break all privacy guidelines.
Those that eventually don't break this so clearly simply leave the person with more doubts than certainty about what is happening.
Personally, I have been looking into this in some detail, and perhaps there will be some news soon.

Sure thing. The problem is that controlling (checking) bitcoin is much easier than checking cash bills. In fact, it's so easy that developing an algorith to do:
addressA = highRisk
if (addressB is anyhow linked with addressA) {
then addressB = highRisk
}
the problem is:
(a) how do they determine that addressA is high risk?
(b) why does addressB need to know that addressA was high risk?
(c) why should addressB owner be any guilty for addressA owner?