How does Cryptomator compare to Veracrypt security-wise?

We need to distinguish two different scenarios here:

  1. Advances in computing capabilities (Moore’s law). This is why there is an ample security margin when it comes to key lengths. E.g. 128 bit keys are considered secure for now. 256 bit keys (like Cryptomator uses) are even better, but not because of progression in computing power itself but because of potential complexity reduction in quantum algorithms like Grover’s algorithm that allow bruteforcing out 2256 keys in just n*2128 operations which is (as I said before) considered a sufficient security margin for the foreseeable future.
  2. Using multiple different ciphers, so that there is still sufficient protection if one of the ciphers gets broken. This is called cascading encryption and Veracrypt offers such an option. The benefits and downsides are discussed in this crypto.stackexchange thread.