Avoid WeTransfer (no E2EE), Google Drive (they scan your data), and Dropbox (unless you use the "Vault" with your own password).