Sender privacy is real good with just some simple best practices.

Receiver privacy is crazy hard to avoid leaking data.