The problem I have is that for all the effort, you're still keeping your data at a third party, who 1) can be ordered to provide a backdoor to your data, and 2) would invalidate your expectation of privacy by the Third Party Doctrine (see: http://en.wikipedia.org/wiki/Stored_Communications_Act).

Short of owning every bit of hardware up to the fiber, is there any way to secure a virtual box such that a service provider could not achieve or grant others access to it?