Flawed is a rather hash word, but yes, its privacy ain't all that great due to been a public transparent ledger that has been heavily regulated thru KYC/AML bullshit.
My experience on bitcoin privacy is limited and must agree that today options between a few implementations like samourai, wasabi and coinjoin are not all that great.
Having said the above, I believe security and privacy are moving targets, that will be further improved and work on by many talent people on the #bitcoin space.
Have you tried the 2.0 version of Wasabi? Coinjoins run passively in the background, don't produce any identifiable change outputs, and doesn't require the user to perform any coin control (even for consolidation, since that is done within a coinjoin).
Here's a short demonstration:
I have, in the past and was really happy with them, but after they decided to sensor certain tx it was a hard pass for me.
I'm now leaning towards JoinMarkets, which Jam appears to have reduce some of the complexity.
Also I'm exploring the option of using monero for some cross-chain obfuscation.
As if the rampant address reuse and deterministic linking wasn't enough, then they started censoring...hard pass
