[qeternity]

This is not entirely true. Additionally Apple proxies traffic to GCP but key management still resides on user devices.

[NorwegianDude]

If backup is enabled(which I guess it is as things are backed up), then the key is also shared with apple.

[spookthesunset]

Wonder if they delegate the keystore to third party cloud services or that is one of those things they store in-house?

[nuker]

> This is not entirely true

You mean user devices may connect directly to Google storage? Did you observe it connecting to IPs in Google owned ASNs?