We can also create one-time pads for tokens, so the number of samples will ramp up pretty so quickly which will make these kind of attack unfeasible.

And I guess we can tweak gzip Huffman tables so user inputs were poorly compressed compared to rest of the page content.