I would recommend reading their article on how they built it, if you’re technically inclined. Attestation method is very similar to how signal scans your contacts for contact discovery privately. https://security.apple.com/blog/private-cloud-compute/