As for trust, there is no way you can trust cloud storage. You have to assume it's hostile, or that your data is crossing hostile territory to or from. The security model has to avoid trust, which is what I described: signed keys in a Web of trust, no CAs, and no closed-source clients.