How private is Tornado Cash?

Can you elaborate on the level of privacy offered by Tornado Cash? Are there any specific features or mechanisms in place that ensure user anonymity and protect transactions from being traced back to their originators? Additionally, what measures does Tornado Cash take to mitigate potential vulnerabilities or attacks that could compromise the privacy of its users? It's crucial to understand the intricacies of Tornado Cash's privacy protocols before making any decisions related to its usage.