We have seen de-anonymization attacks on Monero and all coinjoin implementations, but we have not yet seen this on Lighting other than in some theoretical studies.

Does this mean anything to you?