From a design perspective you are right.

But from a threat model I would dare to say, if you control the platform (OS, Cloud Service) you can easy bypass encryption or deploy your own keys as well.

In the end it is still a trust question.

Until I see a subpoena that fails to yield any user information, I'll continue to be doubtful as to their claims.