Not a counterpoint, but to extend a bit on how it could be done: encrypted data. Or, self-hosting server part available, like Mozilla’s (i.e. GarduaLinux has a fork of Librewolf/ Floorp, called Firedragon which uses their own firefox server for account sync)