It’s been implemented in Taiwan. But as you said, it requires pre-commitment and constant interaction between the parties to make it a reality. There’s no way to join asynchronously or in a permissionless fashion. But fully homomorphic encryption might just be the ticket.