This assumes that one un-compromised round of Darksend is enough.
Enough for what? Could you elaborate please?
The problem is that this will not work with a partially compromised masternode network. I could very likely still end up with and effective Darksend of 1 round.
I'm trying to get my head round this

While I keep trying, maybe you could illustrate with an example of some kind.
