You will probably have tradeoffs. And somehow need to script accept that at some point, you need to trust someone. At the very least with firmware. And you probably need to change workflow.

I find cryptpadb works almost as well as Google docs did a few years ago.