When Apple or Google control the endpoints (the password manager apps on your devices), they can get the keys at the ends if they really want to.