Comment by lapcat

> perhaps they also enabled it by default in sonoma?

No, they didn't.

Anyway, iCloud Keychain has always been end to end encrypted.