Good turnaround on documentation Feedback I sent to Apple. They added the bold text to clarify CKRecord.encryptedValues:

When you enable Advanced Data Protection, the encryption keys are available exclusively to the record’s owner and, if the user shares the record, that share’s participants.