Looks like they are using a Prio based protocol. If they are using Prio2+, I think this article is likely overblown. EDIT: I mixed up my sources - Mozilla tested Prio for telemetry collection. They are using a system called IPA for ads, and I don’t know whether there are formal guarantees for this system