> Backups are not encrypted by default

And it is very difficult to back them up anywhere other than a secret bucket at Google

Also they say messages are E2E encrypted. I don't recall that page saying anything about what happens at rest. Presumably the Meta AI will have, or already has access to them.