This requires trusting at least one of the servers to store your raw data, correct? Local differential privacy doesn't. You might imagine having servers in dif

This requires trusting at least one of the servers to store your raw data, correct? Local differential privacy doesn't. You might imagine having servers in different countries so that the whole system can't be subpoenaed by any one country, but I believe this is a legal gray area that becomes illegal if you say you're doing this to be intentionally subpoena-proof (in the US).