Privacy-enhancing have long been the subject of criticism around supply auditability. What are the trade-offs? What are the risks? And is this an insurmountable problem for the future?