@pzmyers I think distribution may be useful insofar as keeping one actor or operator from becoming too big or attractive for marketers, but if an operator can just suck up data from other instances then there is still room for tracking and analytics. End-to-end encryption might be beneficial since it prevents operators from reading user data, but it would add significant complexity. Not sure if there's a simple solution for this problem.