MacOS has basically the exactly same problem, ADP isn't enabled by default and your data gets backed up to iCloud unencrypted.

At least the option is there, unlike with MS. Also the option to (very clearly) create an offline account, which MS try very hard to stop you doing (read: don’t publish how, block off routes to doing it sequentially)

MS does offer the option to not back up your encryption keys online.

macOS and iOS both send Push Notification data directly to the US federal government, according to Senator Ron Wyden: https://arstechnica.com/tech-policy/2023/12/apple-admits-to-...