It's the backups. The backups aren't encrypted such that only the end-user has the key.