I am rather questioning the privacy at multiplextr than in #bostr as it tell to coracle that the event was sent from "that" relays, and then coracle sign the AUTH for "that" relays also. 

 Yes, multiplextr absolutely has the privacy problem you're describing. The advantage it has is it allows clients to implement routing.