I think this is the best way to do it. - If you want to hold the keys to your backups and set up the system to be private, you have the option to do so, and ar

I think this is the best way to do it. - If you want to hold the keys to your backups and set up the system to be private, you have the option to do so, and are presented with that option at the time the device is set up (and you are also presented with the option to use a local backup to restore or set up a device). The implications of the choice to use a cloud backup should be made more clear, though. - For the vast, vast majority of users who don't have good backup hygiene, having someone else manage backups and hold decryption keys is a good trade-off, considering that the alternative is total data loss.