2-hop vs. 1-hop: privacy & anti-abuse tradeoffs

[spanicker]

The 2-hop proxy lacks the ability to detect or act on reports of abuse, and remediation of this limitation may come at some cost of complexity or privacy.

Generally, 2-hop proxy improves privacy over 1-hop by ensuring that neither proxy can see both the client IP address and the destination. However our initial scope is a pre-determined set of 3P trackers, so it's not equivalent to the larger privacy concern of a user's browsing history.