There's an AT protocol working group for private data: https://atproto.wiki/en/working-groups/private-data

But you're right, the protocol doesn't currently support this.