I agree, there are lots of ways to get data
One way is: send monero to the target and then watch the blockchain to see what happens to it next
That's how they caught the Columbian monero user and the Finnish monero user
Why not use the same trick again?