Regarding anonymization --> do you mean, what if I pointed the camera at someone else? That would be filtered out.
I'm no expert at this but that sounds a lot harder to implement than you're implying, especially if it's all locally stored and not checked over by a 3rd party. What's to stop me from just doing it anyway?
I’ve also thought a lot about trust. Would you feel differently if the system were open source, with the critical parts auditable by the community?
I mean generally speaking yes open source but the issue is that if it’s open source then people can easily disable the safeguards with a fork so idk I feel mixed on it. I’m still leaning towards yes because in general I am for open source. But I’d have to think about it and hear other people’s takes