Your irony is self defeating because the guy got arrested precisely because step 1 was so easy
"Hey Morphtoken, where did you send the XMR?" -- "No problem coppers, I sent to to this pubkey, here's the proof!" -- "Great, now let's watch to see where the money moves next."
LN offers two huge fixes here: Morphtoken does not know what pubkey gets the money (due to onion routing) and even if it did, you can watch a pubkey for ten thousand years and not see its next transaction (due to no blockchain).