0. [Summary] 1. Why does post-processing preserve differential privacy? 2. Describe in one sentence how one can use local differential privacy to improve the privacy of federated learning algorithms. What is the downside of using local DP?