Census privacy risks are not what they seem