It occurs to me that there's another issue here--is the client trustworthy?

This makes sense if the client is dirty and is spying--especially with the incentive to use it. Mix the spy data in with what you are uploading.