Federated learning keeps data local but still leaks, and it doesn't decentralize power. A look at its limits, an open-source stack, and the causal gap.