Once upon a time I built one of the major providers sensitive data services, and a typical artifact of a warrant for a cloud provider is a stipulation the warrant discovery be done without alerting the customer to the search. By encrypting your data with a key management service and enabling the providers audit services (aka cloudtrail) it is impossible by design to execute the warrant without the customer receiving audit trail information about the providers access of the keys and the data service. In theory the provider could make back doors, but the law actually is on their side in that they are not required to take extraordinary measures that materially impacts their business to circumvent controls.
Further there is no physical seizure possible.
I know most small newspapers this is beyond their technical ability or understanding. I challenge this community, maybe there should be an OSS cloud deployable journalism platform with strong security, information resiliency, and defense in depth and breadth against the state.
In the US, if your business is on the internet, it is crossing state lines, even if all your computers are in the same state.
In fact, pretty much all business in the US is considered across state lines.