I think we are privacy ensuring in a way that we do not associate searches with an account and require minimal personal information (we do not even verify email address). And if you want near anonymity you can pay with Lightning. So our privacy 'attack surface' is really minimal.