On this thread an Apple Engineer provided the solution to the problem.

Apparently privacySensitive() only takes effect if the user deactivates Show Complication Data for Always On in the Watch Settings. In order to overwrite the user's choice you need to add the Data Protection entitlement as documented here. By doing that, you prevent the widget to access/show any privacy sensitive data.