From a design perspective you are right. But from a threat model I would dare to say, if you control the platform (OS, Cloud Service) you can easy bypass encry

From a design perspective you are right. But from a threat model I would dare to say, if you control the platform (OS, Cloud Service) you can easy bypass encryption or deploy your own keys as well. In the end it is still a trust question.