Is federated-xgboost secure during quantile sketching?

[vollis]

In quantile sketching, each worker computes the quantile summaries on local data, and the summaries are then merged to get the global one. How do you ensure the security during the merging? I think the summaries could cause privacy leakage.