Apple's epsilon values reportedly range from 1 to 8 per data type, with a daily per-user budget of 1 to 4. Are these values sufficient for meaningful privacy protection? - Apple's model is "local" differential privacy (noise added on device). How does this differ from "global" differential privacy (