Correct but they would not have had access to the the iCloud data without Apple doing work (Resetting password or handing over a copy of the data)
The original comment is correct.
The original comment is correct.
[1] http://arstechnica.com/apple/2014/05/new-guidelines-outline-...
[2] http://arstechnica.com/tech-policy/2016/02/how-apple-will-fi...
Apple may have assisted in providing the iCloud data in a more digestible form than what's available in the public web interface but that's more a matter of convenience than access.