Still they were/are part of PRISM so keep in mind that the privacy offered depends by various U.S agencies.
Any service where you can reset your password/token that is known only to you after you lose it is not safe from government warrant. It can still be safe from mass collection like PRISM.
That said, I'm not sure how much trust I'd place in Apple, but at least this security model is to some extent auditable.