There's a significant amount of guesswork in this Register article. PCC[0] is an example of on-device compute being done in a way to ensure Google (and others) don't see certain kinds of data.

[0]: https://security.googleblog.com/2022/12/trust-in-transparenc...