Oh, because Apple has the plaintext file hashes even under ADP, if those files exist anywhere else in any user account in iCloud (that doesn’t have ADP enabled) then Apple has the plaintext file contents too, so it’s effectively non-e2ee for those files.
Gotta trust someone if you want to use things like cloud file storage. Everything you said is true but sensationalized, someone could be accessing my files but I trust that there are controls in place not to allow that. If I cannot trust Apple, then why should I trust Google or even an AWS EC2 configured by myself to host my files? Anything could be backdoored and any service could read your data, either trust no one and live offline or choose to give your trust to the most trustable service. I chose Apple for now.