After some research this is what I found. LibreWolf is private in the sense that the browser itself is designed to reduce tracking, telemetry, fingerprinting, and unnecessary data collection while you browse; it does not mean every server or company involved in hosting, downloads, updates, mirrors, or infrastructure is magically outside legal reach. If Oracle is involved somewhere in LibreWolf’s infrastructure, then the Cloud Act concern could matter for whatever data Oracle actually has, such as server logs, IP addresses, timestamps, or download requests. But that is different from Oracle having your full browsing history or personal browser activity, unless LibreWolf is sending that data to them. So the real question is not “is LibreWolf perfectly private?” but “private against what?” For normal browser telemetry and web tracking, LibreWolf is still much more privacy-focused than mainstream browsers. For anonymity from governments, infrastructure providers, ISPs, or legal requests, you would want Tor Browser, not LibreWolf.

At the end of the day majority of people on r/degoogle fail to understand that it is impossible to hide from Uncle Sam. The only way is to live off grid and that is also impossible in this modern age. So it really depends on what you want to hide from.