Yes anonymity is a probability game for chain analysis companies.

So according to the privacy maxis the KYC exchange will always know how much purchased but after you mix they will have a tougher time tracking your movements the best way to protect your privacy is to stay away from exchanges all together. Then a utxo is never linked to your real identity