That cuts both ways, so we trust the client (users have to, even if remote sites do not) and do not trust servers to take individual user data in the clear and

That cuts both ways, so we trust the client (users have to, even if remote sites do not) and do not trust servers to take individual user data in the clear and use it wisely & fairly. This applies to Brave servers too. Flip the model.