Are there alternative trust models that would work for the aggregation service?

[palenica]

Are there any other approaches to the security architecture that could work here? For example, multi-party computation (MPC) is an interesting approach that can be complementary.