The data is encrypted and requires an on-device key to unlock it, Apple doesn't have the key[0]. If you lose a device, the data can also be decrypted via a devi

The data is encrypted and requires an on-device key to unlock it, Apple doesn't have the key[0]. If you lose a device, the data can also be decrypted via a device's passcode + 2FA. (Or, alternatively, without 2FA, you make up another key that is needed to access the data)[1] [0]: https://support.apple.com/guide/security/cloudkit-end-to-end-encryption-sec3cac31735/1/web/1 https://support.apple.com/guide/security/cloudkit-end-to-end... [1]: https://support.apple.com/guide/security/icloud-keychain-recovery-secdeb202947/1/web/1 https://support.apple.com/guide/security/icloud-keychain-rec...