It's e2ee and only part of your icloud backup if you enable it. And you can separately manage read/write access from other apps.

https://support.apple.com/en-gb/guide/security/sec88be9900f/...