Actually they do. If you have an iPhone or iDevice and have cloud backup (on by default) Apple can and does spill all those beans. This means everything on your phone. It's "encrypted" on iCloud but Apple has the key. What Apple doesn't do is give them direct access to your phone. This is not because they don't want to but rather they can't do it.
Then don’t be silly enough to use iCloud backup. Keep them on your Mac, and keep them encrypted.