I have Nextcloud set-up on a server from Hetzner and then I use Cryptomator to encrypt and store whatever I consider "sensitive".
Another risk I see is that today's encryption will be easily broken in the future. What if they're storing everything to decrypt it later? Granted, this is a bit paranoid but not impossible. You'd have to have really complicated and long passwords to protect against that.