I use pass and use a free Google instance to run git to which it's synced. I sync using git to all devices. The git database is also synced to Amazon drive periodically.

So the passwords in pass itself are protected by gpg. The Google instance is protected using ssh. Amazon drive is protected using 2-factor auth.

No single cloud provider can get at the passwords, but the password database is backed up at multiple locations.