That's a good point I hadn't thought of. My motive for "get out of the cloud" was more about losing access than risk of breach / leak / spying etc. So that doesn't require getting out, it just requires the local backup copy.