How is an attachment meaningfully encrypted through iCloud if someone who isn't using a Mac can download the file through a link in the email they receive? If that link can be generated for them, it can be generated for anyone.

Edit: Even if a link is generated client side along with an access key, it's sent plain text and anyone who sees it can click it.