And ideally the storage will be encrypted and have basic privacy assurances.

Why would you trust a company to encrypt for you when Cryptomator exists ?

Also, a couple of 4TB drives for cold backup (one offsite) avoids another subscription.