I think most people using crypto for illegal purposes will mainly be transacting with people that don't know their identity, so that is not a deanonymising risk.

It's true that people sometimes get caught via chainalysis/etc., but I think there is a lot of sampling bias here. Someone who isn't an idiot and washes their funds through dodgy asian exchanges/privacy coins is probably quite safe, even compared to using cash.