I'm likely going to use a mix of several of the above options. A combination of client-side encryption and my own services, and maybe non-US companies as well,

I'm likely going to use a mix of several of the above options. A combination of client-side encryption and my own services, and maybe non-US companies as well, but I don't trust the governments of other countries much either.