This has actually been done for decades with usenet. Every encrypted message winds up on a common list, and clients occasionally scan the list and see if they have a key to decrypt any new message. The metadata is then that you put a message there or that you asked for a list of new messages, though that can be reduced to "you used tor" which until such a message server became commonplace might be better.