@aeva
2. Any provider that can accept non-cryptocurrency payment is attached to the US banking system and is probably going to be responsive to US subpoenas anyway.
3. *You* still have to be responsive to US subpoenas, regardless of where the server is hosted; if you delete your password or whatever they can jail you for contempt until you contact your provider's customer service.
There are definitely threat models where it makes sense to have an international host, but it's complicated.