Is the weakest link here iCloud backups?

Afaik, the backups are encrypted but Apple has the key and is the one doing this encryption.