That might fall under the “unethical” part of my question. Could “probably” get away with it if done carefully, but I’d rather be fully in compliance.

Why would self-hosting for privacy reasons be unethical just because the query would be subject to subpoena in principle?