A search company which requires an account with your actual email? And doesn't accept anonymous payments?
It's fine as one of the options, but if there's no option for tokenized identity (that's easy to change when the plan runs out) and anonymous payments, it's a data collecting operation like any other.
See Mullvad and PPQ for how it's done correctly.
Yeah, I felt a little uneasy putting my data on something which could be broken into. Still do, having seen my share of hacked websites at work.
If it helps you, I host everything in subdirectories with non obvious names, so bots only hit 404 pages.
Nextcloud.bonk.xyz -> nope Bonk.xyz/nextcloud -> nope Bonk.xyz/bonkcirrostratus -> good luck guessing that