You cannot be giving opsec tips and then suggesting using some arbitrary 3rd part service (privnote) as something that leaves no trace.

For all we know it is a honeypot. For all we know, everything is a honeypot.