Keep in mind that you need backups perhaps moreso than you did when using OneDrive - 3-2-1 being robust without going crazy.
twkm
Ditto VPN vulnerabilities. Belt and suspenders can help though if a remote is compromised likely all the things it uses will be, if not immediately then eventually.