The security of either type is roughly the same. If you have your username and password, that is all you need. Having the private keys saved is also a good idea. That's essentially all the backup file is anyways.

The whole "cloud" vs "local" naming scheme is nonsensical. They are both essentially the same thing. In both cases the "logging in" happens locally and nothing is actually stored in the "cloud".