Comment by sneak

ADP sends hashes of the plaintext and filenames to Apple effectively in the clear (non e2ee).

If only you and three other people have a unique file, Apple knows you are a group.