Replies are anonymous:

The adversary can never recognize his tag.


(Anonymized replies are safe because each leg is safe.)