> I don't understand why they succumbed to the idea ATProto must handle private

The answer is very simple, the people demand it.

Technically, or if you squint the right way, it is a new protocol (atp://) that shares some parts with the public side. Notably the relay is out (for now?) and the data lives in a different sqlite table (iirc/aiui).