Really, that's beyond naive. You can point to protocols and absence of faults in it, but this protocol works on a device fully remotely controlled by Apple, and

Really, that's beyond naive. You can point to protocols and absence of faults in it, but this protocol works on a device fully remotely controlled by Apple, and you communicate with your location data via Apple website that loads a very big chunk of JS. Can you prove that Apple does not have the ability to slip a somewhat modified JS code specially for you, so it would relay your supposedly end-to-end-encrypted data somewhere else? And that it does not have the ability to access your phone and do anything they want with it? Installing software remotely, installing trackers remotely, remotely accessing information stored in your apps?