Technically, the provider can. But this does not mean the provider will necessarily do so. By viewing files on your server the provider is breaching cloud security compliances, and in the process, also breaching user privacy policies.
You can legally sue such providers and demand compensation.