But evaluated ciphertexts may differ from freshly encrypted ones, which brings up the question of whether one can keep computing on evaluated ciphertexts.
Is it still possible for anyone to transform the encryption of $f (x) $into an encryption of $g (f (x) ) $?