With 1Password you don't have to use their cloud. You can still buy the non-subscription versions and use Dropbox. mSecure 5.5 allows wifi or cloud sync without using their cloud.

For the iPhone power up or 48 hours of lock screen requires a 6 digit passcode not a finger print.

Install the Dropbox app and block the flaw. "End users (device owners) must update their apps that rely on the SDK and are also encouraged to install the Dropbox app, which makes it impossible to exploit the vulnerability; this is because the vulnerable SDK code is not invoked when the local Dropbox app is installed," IBM researchers noted."

Use a system such as z/OS where there is no person that has root access.

Store it with the encryption hardware such as provided by those obsolete IBM Mainframes. The master key for the system is stored in tamper proof piece of hardware. That same hardware handles encrypting user encryption keys which are then stored in a protected file that is accessible only by the encryption started task (daemon).