Yeah I mean you gotta trust them on some level. Backblaze could also push a client update that nerfs the encryption. If you've got really sensitive data I'd probably pick something else.