IP level privacy is something we can't fully address in Cashu: Tor would be best but doesn't work in browsers. VPNs are great but the user needs to get one by themselves. OHTTP is a good compromise which we're adding.
The best part about ecash however is that as the payer / customer in the vast majority of cases you remain fully offline when you make the payment. The merchant needs to talk to the mint (can use Tor, VPN, OHTTP) but the vast majority (customers) don't talk to the mint while making a payment.