I always view cash as a viable option. Cash spent locally is usually pretty private depending on exactly where and how. If it's somewhere that has other “subtle” KYC such as a rewards program or email list and you give them “my-real-name-here@gmail.com” you're still highly monitored even when paying in cash.