Why Pooling?
Timing is (probably) vulnerable to
normalization attacks
Pooling is vulnerable to active attacks
Making adversaries engage in active
attacks is good.
Expensive
Revealing