I can't speak for other solutions but S3 allows use of third party apps and tools. Some of these, I use cloudberry aka msp360, allow total control of encryption keys from your end. Meaning your data, including files names, is encrypted with YOUR keys before transmission. No one but you EVER has access to the keys. I'm confident enough that everything I have, including my tax returns, is backed up there.