Also, consider old school external drives instead of the cloud. Even better than a personal server, which still has a large attack surface.

Your files can't be held for ransom if the drive isn't connected to a computer, let alone the internet.