Why is this a surprise to anyone? I run a US based IT company and we make it a point to ise encrypted Swiss (soon to be Norway) storage for our cloud based offsite sensitive backups. Local + offsite + cloud. All locally encrypted first.

If you are going to use a cloud infrastructure provider (not just storage), you really should use something based in your country and subject to your country’s laws. Otherwise, rent some local data center space and self-host like it’s 2005.