> multiple "non-identifying" queries can actually identify individuals.

Zero challenges from me on this. I 100% agree. However, it is doable. It just takes effort.