https://9to5mac.com/2021/08/05/report-apple-photos-casm-cont...
Apple has the keys; the data is encrypted at rest and in transit, but they can be compelled to use them.