super fud. It needs direct access to one's wallet. It cannot break anonymity from just a receiving address.

exactly... it's like saying I can crack all your passwords, but only if I steal your laptop first.