So to avoid leaking any private data to third parties, I should send all my private data to a third party using a proprietary protocol?

Does this really solve the problem though? If a file that contains the attack appears legitimate, it could potentially be shared. If the file is saved to google docs or dropbox everyone who tracks that folder is compromised also.

It's running on their servers! I prefer to have a VM on my side. In terms of security I don't trust third parties. Or saying it in a different way: can I look at their server configurations before acquiring their services?

Interesting, but despite some searching I couldn't find a price for this service. Has anyone tried it?

I know not everyone can do this but fire up a VM for browsing and reset after every session.