You can stack dandelion++ with Tor or i2p. Plus Monero has both on chain AND network level privacy. If dandelion++ is broken all that is proven is that your IP did A transaction. Not what the transaction consisted of since reciever and amounts are still blinded.
With lightning, the privacy is entirely reliant on the obfuscation of the chain of hops. If origin and desination are linked the whole transaction is revealed and linked to you.