> There’s no way to accomplish this without having the private key in the backup.

Uh, no. There's no way to accomplish that without some kind of user-managed escrow (even a pass phrase would be fine). It's maybe not the seamless experience Apple wants to offer, but it's certainly not impossible.

Frankly the kind of dummyproof restore being offered is fundamentally incompatible with private backups.