Trilium Next has 2fa, note encryption and oidc support AFAIK, so the authentication should not be a concern. Every instance retains its own copy of the data and syncs with the server (if you have one) backups are made daily in the back end iirc. Exporting the data is trivial too in both HTML and markdown.