I asked for details on how the hashing is blinded but haven't heard back. There are plenty of systems where an operator cannot furnish any information about a user, for example a Tor relay operator, mix net nodes, etc.