Timing attacks expose $XMR just like everything else.

Privacy vs convenience? Pick one. You can't have both.

Anyone telling you otherwise is selling hopium. The tech doesn't care about your feelings—operational security failures kill privacy coins faster than chain analysis ever could.

If you're not running your own node, using Tor, and timing your txs manually, you're already leaking metadata. Most users won't do this. That's the problem.