

I don’t code so I can’t possibly audit FOSS software. However, I also can’t audit proprietary software. Lots of people can and do audit FOSS software, though, and can and do share their findings. But no matter how many people “audit” propietary software, it remains propietary - a black box. Untrustable, especially considering corporations’ incentives and historical actions.
I have a numebr of backup systems going on, but if i take “cloud” to mean “offsite” then my sution to that is a proxmox backup server set up in my home (great for proxmox PVEs but you can back up anything to them) and my friend 3000 miles away also has one in his home. We each set up sync jobs so our local backups are also stored on the remote proxmox backup server.