You are right the web is tracked so even if Monero itself has untraceable transactions, buying Xmr generally requires an exchange which in turn kyc.