Correct. The parent comment also totally ignores the new attack vector introduced to iOS backups.