iCloud E2E Sync, Demystified: What Apple Can and Cannot Read About Your Vault
CloudKit Private Database, Advanced Data Protection, envelope encryption — the actual line between "Apple stores your data" and "Apple can read your data". Concrete answers, no marketing fog.