encrypted file stored on a free tier data storage (many are free for the first year)
I am confused, aren't you just pushing the problem further up the chain? Now you need to worry about storing the key that decrypts the file storing the key you wanted to protect in the first place.
Same goes with tarsnap, now you need to worry about where to store the tarsnap keys.