I read somewhere that IMAP was a concern, but I see that almost everything is encrypted (Apple has description keys) in transit and on their servers. Some data is also end to end encrypted so Apple can not decrypt it (like passwords, health data, etc.).

I don’t remember everything at least being encrypted in transit and on their servers, perhaps that is relatively new?

I wonder why they don’t go all the way and have every5ing encrypted end to end.