Wrong.

You can (and should) watch all of https://www.youtube.com/watch?v=BLGFriOKz6U&t=1993s for the details about how iCloud is protected by HSMs and rate limits to understand why you’re wrong, but especially the time-linked section… instead of spreading FUD about something you know nothing about.

You can say anything you want in a YouTube video or a whitepaper. It doesn't have to correspond to your security architecture.

Where's the source code? Who audits this system?