That’s what I settled for as well. Keeping my *.kdbx file in iCloud, doing nightly backups to my NAS, and using Strongbox as a client (there’s also KeePassium with similar features) - which beautifully integrates into Apple’s AutoFill API, so it feels native - i.e. as if you’re using Apple’s Passwords app. And I can access all passwords from Windows using KeePassXC as well.