It is done - while the old Macbook can’t encrypt shit on iCloud, Cryptomator can. So the ugly solution is - Cryptomator Vault > iCloud Shared Folder > Remount on New MacBook > Paf encrypted shared documents folder for 99 european cents a month

https://cryptomator.org/