Why do authors say conflicting things regarding leak-free stages in their paper?
I think they are saying assuming leak free is necessary to prove security for their protocol, but it would be really cool (thus an open problem) to design a protocol that can tolerate leaks in any stage.