The other benefit of manually syncing KeePassXC is that you can require it to use a key file in addition to pass phrase. Then you sync the database using another service but not the key file (copy that to each client locally). I'd your cloud provider is compromised they are missing not only your passphrase for brute forcing (good luck) but also the key file.