Hacker News Reader

Google of course has the decryption keys, another important piece is their policy on looking at data themselves.

Not true if you bring your own disk encryption keys. AWS also allows you to bring your own keys.