As far as I recall they did have some measures in place. Differential privacy just made it a bit more robust.

Arguably the defaults for differential privacy are too robust but that is a different story.