And I have an old Wemos D1 mini connected to my Arduino based smart garage door that helps automate things like lock/unlocking the front door or triggering other presence based actions.
I highly recommend the https://dailytechnewsshow.com/ podcast by Tom Merritt which usually runs 30 minutes episodes, or their 5 minute Daily Tech Headlines version.
Would having a 3rd party host the services in the EU meet your requirements? Or having data residency restrictions with strict key management, EU based support, and access transparency/approvals?
IMO Google is also taking this seriously, but I am genuinely curious if any off the above would meet your requirements.