I think you just need some way to prevent your tx from being flooded. If the default setting was to never 'upgrade' a reconciliated tx to a flooded tx it should diffuse slowly through the p2p network. Maybe this makes it more vulnerable to timing analysis but iirc there was some random delay built in. I'm fuzzy on details, it's been a long time since I studied the erlay proposal. Plus implementation details may differ significantly from the original paper.