I currently use Anytype which is local first, but provides built-in E2E encrypted sync 😎