[lioeters]

I think that's the reality, that most/all consumer and enterprise services can provide only a "reasonable" and compromised level of security and privacy.

If a nation state and/or corporation that runs the infrastructure decides to exfiltrate your data, legally or not - the power dynamic is totally asymmetrical.

Individuals and smaller businesses can only do so much within their power to protect themselves, and at some point accept the compromise that "perfect" security and privacy are not possible.

(Although, I can't help but think that there may be technical solutions as yet unimagined, which could level the playing field.)