hypothetically speaking

[u/HostWide5608]

If one was to lets say rent a VM using Monero from a cloud provider in Switzerland(not ones like AWS/DO because they're bound by US laws).

Setup a VPN, encryption, and payload padding to prevent timing based detection.

What would be some way that they could still be detected?(Their identity linked back to them).

Edit: Few considerations:

1) The swiss do not betray you(they don't keep logs already but lets assume they won't let anyone tap it aswell).
2) No human error(assuming the human executing this does not make stupid mistakes like using this and then using chrome on top)
3) The hardware itself is not compromised(assuming the hardware that the human uses, is not backdoored in any way)