If you encrypt your data before uploading it to B2 you should be fine. Unless you run it yourself on your own server, you can't be sure that your data will be unreadable by anyone poking around unless it's encrypted.
I've been using B2 for my offsite backups for a couple of years now (since 2018), and both Duplicity and Restic encrypt data before shipping it over. I wrote about it here.