I wouldn’t rule out 2. It works quite well, the dual alignment method is used in the research setting for human tumours grown in mice for example. Of course, a very motivated adversary would work this out, but you could use more unusual organisms if you have a reference genome for them.

The problem with 1 is that there may be significant downsides to misidentifying your genome eg you swapped with someone who commits a crime.