There can be significant differences in privacy guarantees between different batch sampling methods in DP-SGD mechanisms.
