End-to-end encrypted but Apple issues the keys when you log in and I don't think they offer any way to require explicit verification of new devices.
Still no proof that there’s no back door, but as far as the system on the surface goes, it does make sense.