complex traffic analysis to deanonymize vpn/tor/etc users does technically exist but it's so target-bespoke and unreliable it's rarely practical
when feds really want an internet anonymous high-value target the methodology has always been web browser exploits
