This is awesome but with a mere 1000-song database it would be simpler just to run the whole thing on the client. How well could the approach scale? (eg. To a billion song DB?)
Nice idea, but do I need E2E to identify a song? Seems like a very low threat model for a malicious attacker to know my wife needs that Elton John song.