> Differential privacy formalizes the idea that a query should not reveal whether any one person is present in a dataset, much less what their data are.

I see one problem here: you almost never know all the possible queries in advance.