Question bout tornado cash privacy

If I use tornado cash multiple times to make a private transaction from contract A to contract B, wouldn't it be possible for an attacker to figure out my private address just by checking if an address repeatedly withdraw ether after address A made a transaction. Even if I wait a decent time to withdraw it would be easy for a computer to check for address coincidences.

If this is true tornado would only be private if is used only once per address