The thing is that anybody who is able to initiate queries has access to that data. No need to do inference attacks over there :-) So, an adversary cannot query data based on particular distribution b&#x2F;c it cannot initiate meaningful queries.<p>If an active server-side adversary can trick the client into doing certain queries is another question though.