Thanks so much fo this. This is indeed a pretty neat way of solving it!
Having spent another afternoon trying to figure out what to do if the data is more sensitive, I now also found a (Tableau specific) solution, using a Kobo Web Data Connector (https://kwdc.herokuapp.com/).
For this you need your account’s ‘secret’ API token (as opposed to the Developer Token) that you can get by sending an API GET request to https://kobo.humanitarianresponse.info/token/
(with basic authorization).
Took me a while to figure this out, so I hope this is useful to anyone in a similar situation.
Cheers,
Johannes