Given that NSA, the Chinese, and presumably a bunch of other countries have a good amount of black hat hacking expertise, I think trusting your hosting provider

Given that NSA, the Chinese, and presumably a bunch of other countries have a good amount of black hat hacking expertise, I think trusting your hosting provider, regardless of jurisdiction, is probably a bad idea. If you had to, I'd imagine the best idea would be to do some multi-party computation/Byzantine system where you place nodes in mutually antagonistic jurisdictions. This doesn't help for email though, since they mail still has to go to one box first.