Process Tomography can identify the quantum channel, while Blind Quantum Computation strives to hide the inputs using quantum gates.
Given the user executes the same blind circuit multiple times (of the order of times required to do process tomography), why can't the server do process tomography to break the blindness?