They've also done an admirable job marketing the specifics of what they do. What's left is all the places where they don't respect the privacy of their users because there's limited marketing value. They don't claim E2E on many services because they don't have it, and adding it wouldn't help marketing. My guess is some Tier 1 support person can drop in and take a look at the GPS pings from your phone.
But don't take my word for it. The Atlantic is far more reputable: https://www.theatlantic.com/technology/archive/2019/01/apple...