With whose key? I am not saying the service is not trust worthy, just that there is trust involved.

Trust not only they are not malicious, but also they won't have some kind of vulnerability.

Plus if it's encrypted how is the other party going to read the file? The key will have to take the same path.