Yes, I run a node and lightning privacy is not great, yet. But even if it were, the implication here is that Taiwanese will have to comply with full KYC and tracking. Of course you can choose to not comply. You can even get away with it and I think you should. For this very reason, I say don't buy KYC.