Things look great! You may turn off either WD or ZAM from real-time.
One well known bypass of CFW is when a malicious file is classified as "trusted"/clean by Cloud Lookup (very less chances though). Internet is needed for lookup and Zemana also needs an internet connection for real-time protection.
So if you prefer ZAM more than WD, you can disable WD and keep ZAM premium in real-time (eg.use case as stated above).
If you ever want to encrypt your cloud storage, you can try
Boxcryptor basic.