There is also a technical blog post [1] on the architecture of Private Cloud Compute. I don't think that there are any details on the context being sent, just that any context is ephemeral, can't be traced back to you, and that the machine instances leverage Apple Silicon's Secure Boot and Secure Enclave.
[1] https://security.apple.com/blog/private-cloud-compute/