What happens if, say, you Torify the code element? Such that it's not possible to identify a specific user by name?

Or have some, say, third-party hash proof of the download? (Essentially signed downloads.)

Or if the system is blind to the identity of the user requesting information? Reads need not be authenticated, only writes, which would have to match some signature, say.

(I'm aware of numerous browser problems, I'm looking at ways around them.)