That's why client-side encryption is useful, regardless of what some "security researchers" self-servingly say.