Anonymous transport, not data

I'm talking here about the low level transport.

By default the transport should leak no information, and then the user can choose from there what to disclose.

Cookie scrubbing, etc needs to happen too, but at a higher layer.