They are encrypted to your device and your device can upload them unencrypted in backups if you don't configure encryption. Plus the original argument was Meta did not have access.