I find it difficult to wrap my head around how Privacy Pass actually works. It seems pretty involved. Kagi‘s implementor actually explained it over on hackernews, but that‘s only a summary.
Since it‘s an RFC standard, I don’t doubt that it works, but I hope someone smarter than me actually checks Kagi‘s open-sourced client code, which should be enough to ensure anonymity, according to the standard.