[JasonADrury]

MacOS has basically the exactly same problem, ADP isn't enabled by default and your data gets backed up to iCloud unencrypted.

[bdavbdav]

At least the option is there, unlike with MS. Also the option to (very clearly) create an offline account, which MS try very hard to stop you doing (read: don’t publish how, block off routes to doing it sequentially)

[JasonADrury]

MS does offer the option to not back up your encryption keys online.