This is a question about record-keeping rather than about secrecy, and reframing it that way makes it tractable.
Any method routed through a regulated exchange creates identity records at that exchange under standard customer-identification requirements, which is where most linkage actually happens.
Merchant data breaches are the realistic exposure for most people, and the mitigation is minimising what the merchant holds rather than choosing an exotic payment rail.
Card scheme chargeback rules are published and provide a defined dispute mechanism with time limits, which no other common method offers.
Methods with no reversal mechanism give you no recourse at all if something goes wrong.
A chargeback is the only recourse mechanism in this space. Price that in.
edited 30 Mar 2025 by w_okoye — expanded the table to cover the lower concentration