[natch]

I have no inside knowledge but what I’ve heard is that Apple’s cloud generally does not hold any keys. Keys are derived from information available only on user devices including the user password, and do not leave the devices. There are exceptions for cases where required for some cloud based functionality but that would not include simple storage and retrieval.

However this may be different in China. Just saying it’s possible for the cloud to be kept in the dark in some cases and that’s what Apple supposedly does whenever they can. Yeah some weasel words there, I realize.