Streams are xored server side to prevent trivial deanonymization by participants