Good morning friends!  Thoughts on my weakest link as far as privacy given the following?

GrapheneOS on pixel 4a purchased with cash.  Monero to pay for all services: cell via silent.link (data only).  VoIP number via jmp.chat (avoid using when possible - used to set up Signal).   Always on  Mullvad VPN.

Monero obtained through unstoppable swap from Bitcoin that was unfortunately obtained via KYC means. 

Of course, depends on what I do with all that - assume I don't do anything obviously stupid to dox myself lol.  

I know this isn't enough for a comprehensive assessment/analysis, but maybe enough for a discussion/thoughts?