The core question holds: can privacy stay real without breaking compliance?

If this scales, does it empower users or strengthen the gatekeepers