Have you read the SpiderOak disclaimer though?

NOTE: Logging in via the SpiderOak website does temporarily allow SpiderOak employees access to your password.

https://spideroak.support/hc/en-us/articles/115001854583-ONE...

That works for any service where you don't fully control the other endpoint. They are just being transparent. Although the wording re: website is peculiar. Could it be their form of a canary like warning?

As a developer, I expect that smaller shops' infrastructure isn't as thoroughly locked down and things like passwords getting logged to splunk/ELK is tech debt, and par for the course. However that's a very specific exception though, to the point that instead of putting work into adding that into their disclaimer, they could have made sure the password wasn't being logged instead.

They deleted all of my data when one of my payments didn't go through, without notifying me. They are impossible to contact outside of passive aggressive email support. I deeply regret trying to trust this company with my data, which is now gone. Do yourself a favor before trusting them and give them a call and to ask about their services.

Or maybe rclone with encryption set to on. Then you have a bunch of clouds working for you with crypto which is only yours.