I keep everything in the cloud as well. Documents are either in GDrive / Dropbox and photos are in iCloud. For sensitive documents I created an encrypted disk image that I store in Dropbox and mount when I need access to it, which is pretty infrequent. I periodically backup content to a NAS and I backup the NAS to B2.