I have my data backed up locally on an HDD, though I’m planning on building a server machine to hold more data with parity (not just for backups). Important data I have backed up in Google drive and Proton drive, both encrypted before upload. It isn’t that big, I don’t back up media or anything in the cloud. Oh and I have some stuff in mega, but I stopped adding to that years ago. I should probably delete that account, thanks for the reminder!
I have my plex accessible from outside, but only to plex users I add. It’s not like anyone can just get my IP and watch my content.