In blockchain privacy protocols without full indistinguishability, set intersection attacks can identify a user's transaction source using two transactions