On the Privacy Risk of In-context Learning