> I'm wondering what a good architecture for building a system to leverage visual telemetry without harming user privacy would really look like. It wouldn't.

> I'm wondering what a good architecture for building a system to leverage visual telemetry without harming user privacy would really look like. It wouldn't. It doesn't matter how valuable the result is: user privacy is, and always will be, the compromise. The only reasonable thing to do is sell that compromise to users explicitly.