having a caching relay connected over Tor would help for untrusted clients, needs to have auth pass-through also

would also save bandwidth as well as increase privacy, with Tor or without, as it cuts out a lot of time correlation if you control the cache relay

this is why really all clients should have the capability to use at minimum a local cache relay for storage and optionally a remote one (for more privacy)