its utxo model.Do you mean, when you send BTC to a private address, you don't send parts of BTC FROM that address? Or if you do, you send parts of BTC from that address, but then you need to send the leftover to a fresh address? How does this work?
You send the whole balance and the "change" gets transferred to a new address of your wallet.
So the change is auto protected since its having a new address than before.
But the address you initiated it from, its public key is written in the chain for everyone to see (and qc can calc back the private key from it).
The bitcoin addresses are not public keys but derived by one way functions so you cant calc back from this to its private key (unless its public key has been revealed).
Maybe this changes some day tho.