Agree. GiftWraps alone don't protect users against their relays. They must turn on a VPN, and the client app must create single-use connections to get to that level of security.
Even with all that, the anonymity set will be too small today to avoid guessing who the sender pubkey is.