They say they have a technique called Secure Aggregation as well so that it can only decrypt the update if many users have sent their updates. I don't know how

They say they have a technique called Secure Aggregation as well so that it can only decrypt the update if many users have sent their updates. I don't know how possible that would be to reverse engineer. Plus this would seem a computationally expensive way of conducting mass surveillance