Utility–privacy plots for the adaptive threshold attack model for Beacons, compared with baselines. (A) K = 10, baselines only flip SNVs. (B) K = 10, baselines only mask SNVs.