Apple's private cloud compute architecture fails to eliminate all metadata leakage. While Siri processes requests on secure servers, traffic patterns still reveal user behavior to observers. This limitation proves that hardware-level isolation cannot fully mask activity. Developers must now prioritize differential privacy to prevent these side-channel leaks in agentic workflows.