What if Richard is a spy? He would have the IP adress of the sender and the Cloak adress of the receiver right? That way, if the receiver adress is known to be from a drugs dealer, Richard has the IP adress of the sender who is now exposed of illegally buying drugs.

Edit - I just don't understand the last part; what good is all this cloaking if bobs IP is (apparently) still connected to the PoSA wallets?