re AC
I encrypt sensitive cloud data - except I don't use the cloud vendors approach but encrypt it on premises before it is uploaded.
That approach works for any cloud provider & removes concerns about any backdoor the cloud vendor may have re their encryption methods .