That’s a fair point, although the exchange would still know how much BTC you purchased (and possibly spent). They just wouldn’t know who the recipient is or what they spend it on next. (My technical understanding of Lightning privacy here is limited so I could be wrong).