Yes, without public-key crypto or at least crypto of some sort, you easily lose any secrecy to any bad actors in the mix net. But the absence of dummy messages or very high traffic also means you don't necessarily get anonymity either: just observe everyone in the System.