Unless you use the newer Advanced Data Protection mode, Apple also have access to decryption keys for some things like iCloud backups.