I'm by no means implying any malfeasance. I fully agree with your thesis about Apple's business model.

Depending on your threat model in regards to your privacy the assurances made by Apple may be enough.

To me, it doesn't really matter. As long as I have no proof or control over how my data is being processed, it's better to just assume the worst case and practice data minimisation.