You can self-host with nextcloud using a hardware key like ubikey as SFA. Plus there's the Foss version of vaultwarden. With nrxtcloud you can run backups of graphene OS, generated by 12 words, protected by a password over it and a second factor like the ubikey or similar solution.