Interesting triplication in the article, I wonder how that got through editing. These are adjacent in the text:

> Privacy Pass is used by both Apple and Cloudflare, among many others.

> An attack on Privacy Pass would require an attacker to request 2^43 tokens from Cloudflare, Apple, or another organization.

> An attack on Privacy Pass would require an attacker to request tokens from Cloudflare, Apple, or another organization 2^43 times.