There was a journalist workshop years ago, and the lecturer who was formerly an interpol for cyber crime. He said Zcash is a broken OPSEC by design unless they remove the t-address pool. As a person with the same knowledge and experience, using Monero and Zcash, he will be more likely to get wrecked by Zcash than Monero.

t --> t

t --> orchard

t --> sapling

orchard --> t

orchard --> sapling

orchard --> orchard

sapling --> t

sapling --> orchard

sapling --> sapling

Only sapling –> sapling and orchard –> orchard are private. Other tx types will release metadata, allowing blockchain inspector to track them down using timing analysis and heuristic patterns.