Privacy of ZCash is not affected by the underlying cryptography; the zero knowledge proofs used enjoy perfect zero knowledge, which does not rely on any cryptographic assumptions.
Basically yes. Strictly speaking privacy also relies on assumptions about Curve25519 (with a Blake2b-based key derivation function) and ChaCha20, but those are standard and uncontroversial.
