Yeah, the whole cloud sync topic is really unsolvable if we just limit choices to Google and Apple.
I'm using /e/ cloud on my phone but I hesitate to load anything sensitive there... because it's someone else's cloud and a dedicated attacker *will* eventuall hack or subpoena them.
The only solution really is to run your own Nextcloud instance and then you're mostly in control of your data.