I've got some vservers and some block storage at hosters in a different country and I terminate a VPN tunnel there from yet another country. Storage is LUKS encrypted and VMs are configured to halt hard automatically in case of certain triggers that hint towards hypervisor side fuckery.
It's not bullet proof, but it's fire and forget, basically seed boxes where I've split knowledge further.
I used this as an exercise in provider agnostic deployment and I'm mainly hosting archive.org torrents that can use some seeding there.