And you are correct.
If you haven't done so yet, look into GnuPG (a.k.a. GPG, the FOSS version of PGP). I have used GPG for encrypting personal communications and data like passwords, for over two decades. The only drawback, but it's significant, is that it is nowhere near as convenient as invisible built-in encryption. You have to think about it and deal with it explicitly.
Granted, relying on Apple or another reputable vendor to encrypt your data is generally safe, and it's certainly painless. But I truly believe that the time will come when the government weakens or outlaws good commercial encryption, and the only fully-private encryption available to citizens will be roll-your-own GPG or equivalent, because it's the only way to guarantee that only you have the keys to decrypt.
A GPG 4096-bit key is uncrackable at present and will likely remain so for many years, and when AI or quantum computing gets good enough to crack that, you can always up the ante and lengthen the key.
“encrypting personal communications and data like passwords.”
That is the huge one for sure. Sharing passwords/keys to a peer on other end is the hardest thing to do so that any encryption at all can be used securely between peers. Just how you share that key is the weak point. Even texting these is vulnerable.
I have been on a personal project to implement all the possible tools. Currently on a project to fork and plug holes in the ZeroNet protocol. Working on making a complete client package including OS so that a “private club” can create their own unique ports and secure internet 3.0 P2P network.
I haven’t played with GnuPG much yet, but you can bet I will be investing some time on it soon. I am trying to incorporate as many as these utilities as possible. The challenge has been making it all work together as a simple GUI package for the less knowledgeable to use painlessly.
Thank you very much dayglored. :)