You mentioned the "well known security expert" comment I made. The guy I followed was more likely to be cynical about what others were doing. He had a reputation for finding holes in the work of others and didn't pull punches. I haven't followed his writings for quite some time as I couldn't deal with all the negative stuff he found. While I'm sure his work wasn't/isn't perfect, I figured I trusted his judgment more than I trust my own.

There is no possibility of 100% security, just as there is no possibility of 100% in our other daily activities. I work on reducing the risks while balancing that with my knowledge of my own nature. I know I won't get around to swapping external drives to a remote location on a regular basis, so I had to acknowledge that the better plan was to use a cloud service. Ron did a good job of describing me when he talked about how easy it is to go a year without taking a drive off site.