We would need silent payments combined with wasabi or preferably joinmarket. That way addresses don't get reused and the user is more or less one click away from coinjoining everything.

It may not defeat the NSA (highly unrealistic) but it keeps things private enough from criminals and prying eyes to know where the sats go and how they get spent.