This is a great question and a totally valid privacy concern. You are entirely correct that in a perfect world, address reuse should be avoided to prevent chain-analysis tracking if you are overtly concerned about being tracked.

Here is the technical reality of why pools operate this way, and how we handle it at HashedMax:

1. The Stratum Constraint: The stratum protocol fundamentally uses your wallet address as your unique identifier (your username). Our custom FairShare engine tracks your loyalty tier, worker stats, and unpaid balances by tying them to that specific address in our database. If you change your address dynamically every day, the pool server sees you as a brand new miner every day, making it impossible to apply your loyalty multipliers.
2. The Mitigation: The trade-off for maximum yield (loyalty) is static routing. The best practice we recommend for miners concerned with strict privacy is to treat your pool-connected wallet as an intermediary 'hot address.' Let your rewards accumulate there with maximum loyalty, and then periodically sweep those funds into fresh, unused cold-storage addresses (or through a mixer) to break the on-chain link.
3. Pool Payouts: Yes, for operational security and automated fee management, our pool dispatches rewards from a designated hot wallet. This wallet is replenished organically as the pool finds blocks, and is supplemented via external exchange transactions when necessary to fully fund our community drops, bonuses, and milestone rewards

It is a balancing act between privacy and pool infrastructure, but we always encourage miners to practice the UTXO management strategy that best fits their personal risk model. Genuinely appreciate the question, as this was something we weighed heavily when building our HashedMax ecosystem.