Admittedly I was asking this here primarily for small business suggestions– I certainly wouldn't expect a simple provider switch to pull the wool over the NSA's eyes. It's a silly thought for a business anyway, where the only people you might be trying to hide from are your competitors. As you said, for practical security Google's offerings are likely top notch and it gives me no qualms having some accounts with them. That being said, I think there's still room for someone to bring almost as much to the table security wise through focus and perhaps a tighter codebase, but beat them out for clear ("fair and decent") terms in regards to privacy and data handling.
Regarding Fastmail, as far as I can tell the new interface is one of the better ones around and it's a big help that they provide Yubikey authorization. I've been using Google Authenticator for a while now but in recommending it to others I've found people taking advantage of just about every opportunity to undermine its usefulness (i.e. backup codes not protected or used regularly when their phone is dead, disabling two-factor auth for a few days because they forgot their charger, or sharing app-specific keys...).