2. DDG is SSL, so there's some hope that the traffic is not visible to a passive observer, even the NSA.