> Both the request and the response can be appropriately anonymized so that the government doesn't know the site, and the site doesn't know the person's identity.

Yes that's how it's done in France for instance, and generally how it's being discussed in the EU.