Your records live in someone else's account
Consumer cloud accounts are reached with a password and a recovery route. Anything that reaches your account reaches every file inside it, including the copies you thought were safe.
The account is the attack surface, not the file.



