Even in the case where the Urbit container and network are perfectly implemented and widely adopted, I'd imagine privacy as of the average user if not most user

Even in the case where the Urbit container and network are perfectly implemented and widely adopted, I'd imagine privacy as of the average user if not most users would continue to be compromised: The plebs would end up authorizing liberal permissions to to watch some out-of-network UrbitTikTok video, even as we screamed at them not to. And the devs would be forced to enable some phone-home capabilities in exchange for access to their pro tools. Or go the jailbreak route and play a constant game of cat and mouse. In essence, if you're on the consumer side, it seems like you're not in a position to negotiate privacy terms regardless of whether you access the network in a centralized or p2p way.