This. The article plainly states that too: "The obvious flaw here is that Kagi still records source IP addresses along with Privacy Pass searches, potentially

This. The article plainly states that too: "The obvious flaw here is that Kagi still records source IP addresses along with Privacy Pass searches, potentially de-anonymizing them"