If the client-side encryption is in the browser, it would not help: this hijacks channel between two different parts of application, not the cloud storage conne

If the client-side encryption is in the browser, it would not help: this hijacks channel between two different parts of application, not the cloud storage connection. Having native, non-web app would help here, but I don't think this is ever going to happen.