and in practice maintaining that theoretical anonymity is hard. if you use a distinct amount in a transaction, it'll be visible. if there's a low volume your transaction can be correlated with a high probability, etc.