Today we answer a couple of your questions. We explain why it is not possible to categorically exclude certain services, just because they are delivered by an American companiy, hosted in American cloud services. We get into the difference between having secured as opposed to exposing personal data to unnecessary risks and what the GDPR thinks about that. Finally, a listener's question leads us to the subject of "security by obscurity".

https://en.wikipedia.org/wiki/Foreign_Intelligence_Surveillance_Act