Like this: https://security.googleblog.com/2018/10/google-and-android-have-your-back-by.html https://security.googleblog.com/2018/10/google-and-android-h... TL

Like this: https://security.googleblog.com/2018/10/google-and-android-have-your-back-by.html https://security.googleblog.com/2018/10/google-and-android-h... TL;DR Android backups are end-to-end encrypted, but can still be restored to a new device without the involvement of the original device, using only the user's existing screen lock code and nothing else. Brute force attacks against the short screen lock code are prevented by secure elements in the datacenter. Apple could have done this too but they caved when the FBI told them not to. They thus retain the ability to read all of your data including supposedly "end-to-end" encrypted iMessages, unless you disable iCloud backups completely. And of course Apple tolerates no alternative cloud backup apps in their closed ecosystem so you're SOL if you want end-to-end encrypted cloud backups. I think this is shameful for a company that makes such a big deal about supposedly caring about your privacy.