AWS offers encrypted backups, and afaik there's no scanning of anything you put in a bucket, but why trust them? Just encrypt your own backups before uploading them, and keep your own keys. In other words, your storage provider needn't and shouldn't be the purveyor of your backup software.

Except with an iPhone, you don't have a choice.