It's interesting there's no remote attestation the other way around, making sure the server is not doing something to your data that you didn't approve of.

There is. Signal uses it, for example. https://signal.org/blog/building-faster-oram/

For another example, IntegriCloud: https://secure.integricloud.com/

confidential computing?