> Are photos uploaded to iCloud encrypted client-side?

Well, I can share a link to them and others can see them, including anonymous users. Just leads me to believe that either they aren’t or if they are, they have the key.