Current state-of-the-art QoS prediction methods face two main limitations. Firstly, most existing QoS prediction approaches are centralized, gathering all user-service invocation QoS records for training and optimization, which causes privacy breaches. While some federated learning-based methods consider user privacy in a distributed way, they either directly upload local trained parameters or use simple encryption for global aggregation at the central server, thus failing to truly protect user privacy. Secondly, existing federated learning-based methods neglect distributed user-service topology and latent behavior-attribute correlations, compromising QoS prediction accuracy. To address these limitations, we propose a novel framework namedPrivacy-EnhancedFederated ExpandedGraphLearning (PE-FGL) for secure QoS prediction. It first conducts user-service expansion on the invocation graph with advanced privacy-preserving techniques, upgrading first-order local QoS invocations to high-order interaction relationships. Then, it extracts hybrid features from the expanded invocation graph via deep learning and graph residual learning. Finally, a two-layer secure mechanism of federated parameters aggregation is designed to enable collaborative learning among users through local parameter segmentation and global aggregation, achieving effective and secure QoS prediction. Extensive experiments on WS-DREAM demonstrate effective QoS prediction across multiple metrics while preserving privacy in user-service invocations.