State of the transaction privacy work in Bitcoin

This is just nonsense.

Worse, this leak occurs passively if Alice and Charlie both use the same custodian.

Well, of course if a single entity has a complete view of all the transaction history for all parties they can see payment relationships. Stating this as a risk for Silent Payments is nonsensical. If a single entity has all the transaction history for all parties using coinjoin wallets the same fact is true.