pretty sure my remote encrypted backups[1] can keep a secret or two from the cloud storage provider

[1]https://rclone.org/crypt/