Would you clear the misunderstanding then?
How it all works is documented: https://support.apple.com/guide/security/welcome/web
The point is that the deep compromises made inside iCloud Backup are hidden from the user and (at best) buried deep in technical documentation. So deep in fact that I can’t find any mention of it on that site at all.