Encrypted at rest and transfer just means that if an unauthorized someone gets ahold of their backend systems, they can't read the file. It doesn't mean that G

Encrypted at rest and transfer just means that if an unauthorized someone gets ahold of their backend systems, they can't read the file. It doesn't mean that Google can't maintain the key and use it to process and inspect the files. If they didn't have and use the key, they would never be able to create previews for files they keep, nor would they be able to offer a search function.