I do want to point out that it is possible to use a central server while keeping metadata private if you use noise
Here are some protocols that use noise (specifically differentially private noise):
https://people.csail.mit.edu/nickolai/papers/tyagi-stadium-e...