Unfortunately this has several significant drawbacks: the threshold has to be independent of \(h\) (or learning the threshold would reveal \(h\)); the system would need to maintain state of all user queries to the API; and preventing Sybil attacks requires a global pool of user queries, which can present significant privacy risks (Debenedetti et al., 2023).