How “anonymous” is Monero?

Let's say you live in an oppressive country where information is suppressed and certain ideas are illegal.

A shadow library on the Dark Web crops up with a $10 XMR entrance fee. You end up buying Litecoin through a KYC exchange, then use Cakewallet to directly exchange the LTC for XMR (both are wallets managed by the Cakewallet app).

At some point, Librarian gets raided and their electronics seized, including all the info on their XMR wallet.

How insulated is that Librarian's customer base, particularly the one I described, from having their transactions traced?