Strong anonymity requires distributed trust An anonymity system can't be just for one entity (even a large corporation or government) You must carry traffic for others to protect yourself But those others don't want to trust their traffic to just one entity either