Secure aggregation can be stacked with differential privacy, the former hiding individual updates and the latter limiting privacy leakage of the aggregate result.