Comment by ajross

> Yet it is still end to end encrypted

I don't see how that's possible. See the instructions at:

https://support.apple.com/guide/icloud/set-up-homekit-secure...

Nothing in the process requires a token/authentication/blessing be done from a pre-existing hub machine that would have to control the encryption. Apple can remotely grant your device HomeKit cloud video based on nothing more than your ability to attest ownership of your new device.

And if they can do that, they can certainly recover the video internally for anyone who wants it. They just choose not to, and you believe them (where you clearly don't for Amazon).