You don't have to fool people, you can just accept that privacy "warriors" should not collect naive users' xpubs.

This is same thing as using someone else's Electrum server on Blue wallet or using some Monero wallet while connecting to someone one else's node or paying for a VPN with a credit card. But no is busty Blue wallet or Sparrows wallet's balls over the same thing. Privacy by trust based system is something that exists whether we like or not. Ultimately the end user/consumer has to do their own homework.