Private DAO with Semaphore

Yes we depend upon censorship resistance of the host chain.

Also it is possible to sell votes. Check Minimal anti-collusion infrastructure for a way to prevent that.