Anon already picks a random keypair and adds an anon tag. Private just adds an encrypted note in the anon tag which has the nice benefit that it is backwards compatible and just looks like an anon payment to clients that haven't implemented it yet.

The amount is still public, this is just a modification to the zap request inside the zap invoice which gets included in the zap.