I'm wondering how they can trace it if you buy it from an ATM with a mask on, or via a VPN on a battery powered raspberry pi you put in the ceiling of a coffeeshop, then you tumble it constantly.

Even if they break the Monero encryption, and the tumbling, it's a dead end at the point of purchase.