What about using Whirlpool through Sparrow wallet? There Tor is easily enabled. Are they also receiving my xpub?
Discussion
Better always connect all bitcoin apps you use to your own node or with sparrow your own electrum server and always use Tor.
Label all transactions.
That should prevent most privacy hick-ups.