[p0la]

Very true when each user is accessing its own encrypted data directly. But from what I read here in the comments, Apple is managing encryption on their own HW, which almost surely means that data is read and wrote from Apple’s machines. Such aggregation of read and write calls across users makes access traffic patterns analyses risk fairly minimal...

[pjerem]

« Their own HW » is in fact « their users devices »

[nuker]

Nope, its Apple servers. User devices don’t connect directly to Google

[qeternity]

This is not entirely true. Additionally Apple proxies traffic to GCP but key management still resides on user devices.

[NorwegianDude]

If backup is enabled(which I guess it is as things are backed up), then the key is also shared with apple.

[spookthesunset]

Wonder if they delegate the keystore to third party cloud services or that is one of those things they store in-house?

[nuker]

> This is not entirely true

You mean user devices may connect directly to Google storage? Did you observe it connecting to IPs in Google owned ASNs?