I'm not sure what you call "client-side encryption". As far as I know, ICloud is not end-to-end encrypted, so Apple can read anything on your ICloud if they want to.