Also consider that Apple has the big pockets to build their own server hardware, to claim multiple layers of privacy - but also remember that when they first introduced "differential privacy" and claimed it would be totally anonymous, privacy researchers soon found out that Apple set the epsilon so low that even after a few requests to their service, the user could be de-anonymized.
source: "Apple has boasted of its use of a cutting-edge data science known as "differential privacy." Researchers say they're doing it wrong." https://www.wired.com/story/apple-differential-privacy-short...