>> What is the solution then? The answer is a new technology called end-to-end (e2e) encryption. What is e2e encryption? It’s a security technique where data is encrypted on the client before it even gets to the cloud, and is then decrypted by clients when it is received from the cloud.

Isn't this already done with https? Though perhaps your point is that there is no additional decrypt/encrypt stage while the data is in the cloud?

>> The cloud can store it, and process meta-data about it, but it can never peer into it.

I assume that the meta-data is exposed and subject to the same potential attacks?

My main takeaways from this article are
(1) DO NOT add a decrypt/encrypt stage in the cloud and
(2) DO add enough meta data for the cloud to perform whatever processing is necessary

Sorry if I've missed some important insight.