There's no reason that the history couldn't be encrypted in a way that's only accessible to the client. There are even techniques for encrypted indexing and key

There's no reason that the history couldn't be encrypted in a way that's only accessible to the client. There are even techniques for encrypted indexing and keyword search.