Currently dabbling with an overlay #encrypted FS + #rsync, which is similar to what is described here: https://www.baeldung.com/linux/rsync-encrypted-remote-backups

i.e. files are encrypted in real-time through a virtual filesystem and the encrypted content is stored externally via rsync. Makes it super fast, incremental and reasonably secure. When restoring, you can sync back to the encrypted FS and it magically appears in your real FS.

The only downside (but also advantage...) is that the remotely stored content can not be viewed by itself (file- and directory names are gibberish) , i.e. you restore everything or nothing. #backups

Edit: Another downside: Since directory names and filenames are not identifiable, rsync can also not exclude certain patterns like cachefiles, trashbin, .git-dirs, etc.