The verdict: No cloud, no account, no company to get breached — your vault is a file on your machine. Slightly more work, considerably more sovereignty.