Which, IMHO, is the right way to do it.

Overly freezing the context guarantees at this early stage would be highly limiting.

It makes more sense to invest in surrounding privacy infrastructure (PCC) to provide sane guarantees without strictly bounding context.