Syncthing own receiver is fine if you pin device IDs and use your own relay. The controversy was about their global discovery servers leaking IPs — not the core protocol. On GOS with no Google backup, I'd still trust it more than Nextcloud for local sync.