Sure, except that with differential privacy, say 5% of telemetry reports would be marked as visiting do_I_have_very_bad_medical_condition.com anyway – regardless of whether they actually did.

What if a person visits 10 domains all indicating the same thing?

5%^10. Very very unlikely. Sounds very similar to "guilty beyond all reasonable doubt".