[Joeri]

I don't think any country is safe at this point. TNO (trust no one) is the only solution. Your cloud provider should have no ability to hand over your data because they can't decrypt it themselves. For example, Lastpass has an architecture where the passwords are encrypted and decrypted on the client, the server never sees anything but pseudorandom noise, and you can audit their browser addon to verify this. You can, with careful design, build many - if not most - cloud services in this way.

[girvo]

That is exactly what we are trying to do. The problem is that is somewhat at odds with machine learning in practice, but I have some ideas in the space.