> Obviously Mini was using the encryption properly else it wouldn't have worked to begin with.

Just want to point out this isn’t inherently true. For example an insecurely generated session key would work fine but not be secure.

> Of course, it's very unlikely Apple is doing that. Just putting the thought out there.

Apple is doing what? Not using encryption properly? What reason do you have to believe that?