I see lots of ways to mitigate requesting the keys from disclosing much information: - could set the false positive rate higher than the chance of encountering

I see lots of ways to mitigate requesting the keys from disclosing much information: - could set the false positive rate higher than the chance of encountering a case in the wild (which makes it smaller) - phone could be programmed to sometimes randomly request keys even when the filter doesn't match - keys could be distributed across many static mirrors and your phone could pick one at random if the filter matched