4 ms·

Just fwiw sample size isn’t a robust defence against this kind of attack. Check out Differential Privacy.