The protected tag is a relatively new feature that clients may have slowly been adding. I think it was originally thought up for the sake of lockbox and zapbox relays, so that there could be kind 1 and other standard note types that could be published to a specific relay that only a select group could read from. This would be more private than publishing to public relays that anyone can read from, but less private than encrypting the content.