Hi,
Griffin Boyce wrote (13 Sep 2014 23:17:11 GMT) :
I'm not sure how anonymous the reporting is on Debian's end.
Recent versions of popcon report via encrypted email.
(I'm aware that it doesn't fully answer your question, but without a minimal explanation of the threat model, it's unclear to me what the actual potential problem is for the usecase you're working on.)
Cheers, -- intrigeri