Well, one can use IPFS through Tor, and use gateways that are Tor onion services.
It was y'all that actually got IPFS working via Tor.
Is there a reasonable way to use untrusted gateways while upholding the data integrity guarantees? I think it should be possible in theory.