It's a bit complicated. Methods like differential privacy and secure aggregation on top of FL generally help, but there are some caveats. See "Is it possible to Prevent Our Passive and Active Attacks?" of http://
cleverhans.io/2022/04/17/fl-
privacy.html
….

→ View original post on X — @thegautamkamath,