You're correct, though its Apple's MO to supply security in an intuitive manner. IF you tout all these parts of your platform as secure and have one insecure piece that interfaces with it then it isnt a secure platform. The onus should be on Apple to secure iCloud. To their credit, I think they know that and will be. Those who are knowledgeable and care about security will continue to stay ahead of those who aren't, but Apple is making the division smaller.