RE: https://mastodon.social/@pfandrade/116035886020550720

So can we actually use CloudKit's public database to store user-specific and/or sensitive data without it being widely available? So it's more like a traditional database an app can build functionality on?

Can anyone confirm this?

If that's the case, I've totally misunderstood the public database for years. I have always considered it suitable only for sample data and other data meant to be broadly accessible without auth.

@simonbs @pfandrade I'm pretty sure anything stored in CloudKit for any bundle ID can be retrieved on a Mac with System Integrity Protection turned off. Security by obscurity only
@stroughtonsmith @simonbs if it is _world readable then everyone can read (has nothing to do with SIP).