That's what they say about iMessage, too, but then the devices back up the endpoint keys to Apple in the iCloud Backup (non-e2ee and readable by Apple/FBI).
The AirTag keys are supposedly stored in iCloud Keychain (which unlike nudes sent via iMessage, is actually excluded from the non-e2ee iCloud Backup) but it's been a long time since I have read the security architecture document for how the offline Find My system works.
The issue with "the data is encrypted" is that a) the receiving device isn't yours (it's some random person's iPhone) and if it's totally opaque to Apple, how do they know to provide that encrypted data provided by some random airport iPhone to your specific account so that you can decrypt it?
It seems sort of handwavey to me. I remain unconvinced that Apple is that diligent about maintaining lack of location tracking for iCloud to AirTag mappings given that 99.99%-ish of iCloud users are already providing location to Apple a hundred other times a day (maps, ads, app store, music, books, TV+, etc).
It depends, I guess? If someone was going around offering anyone $10m to beat up a pregnant woman, then yeah I’d say they are the main person to blame if a pregnant woman gets beat up as a result.
Again, that’s not to say that the person who did the beating isn’t also responsible.
Is beating a pregnant woman the same as giving poor customer support?
What is the morality of working a customer support job to support yourself, if the company you work for gives poor customer support as a matter of policy/choice? Would that make you a bad person? If you do business with such a company, and make the mistake of calling for customer support, what would that say about you?
Politicians do not use the same companies. There are very specific firms that primarily handle political communications and text messages and phone calls.
And political communications are exempt from CAN-SPAM
Apple’s location database uses the location of Wi-Fi routers to get proper GPS locations. If someone is spoofing his routers MAC address, then that could fix it.
But given how fast agents are moving, I would be shocked if such tools were not already being built