iCloud backups have no meaningful protection against attackers who can compromise a target’s iCloud account.
The (in)security of iCloud Backup
Nicholas Weaver

If Tim Cook is serious about privacy, that’s the next thing they need to secure. Otherwise all the talk about preventing governments from subpoenaing data on the device isn’t worth the disk it’s stored on (in the cloud).