I've seen enough reports of employees charged with viewing customers' private data to be skeptical that this can't be done. Also, people keep finding security flaws. If outsiders can penetrate the system and download terabytes, it ought to be even easier for insiders.

> Will leak it is a bit too strong and harsh

Not at all. I used to design airplane parts. The principle is not "could it fail" but "when it fails, how do we ensure the plane won't crash?" It's a completely different mindset.

> guaranteed to not happen

If you say that in the airplane design business, you'll get your knuckles thwacked with a ruler. It is always when it happens, ...

> current privacy policies

Which can change at any time.

I clearly judge risk differently than you do. My approach comes from 3 years of designing airplane parts. I wish this approach was taught more often.

I know that if my data is not in the cloud, it will not be compromised by the inevitable failure of the cloud to protect it.