And several of us here know this as the reason why rented cloud services are terrible. The providers, by simply being known and by the usual capitalist fails of cutting corners to provide a barely passable service, are always going to be vulnerable to attacks, either by hackers, owners/shareholders or state regulations. Synchronising data to another device you own never needs a server in the middle – it’s just designed that way. Even before the chance of a bad actor’s influence, the reason servers are ever made mandatory as central communication is data harvesting for sale to land in the hands of businesses that use it to manipulate people to purchase their products. If harvesting does not happen, then the ToS agreement would not include agreements to it.