Or just require the client to do the indexing and the searching, and not upload the index anywhere.
[1] https://datatracker.ietf.org/doc/html/rfc1064