most backup providers encrypt data on their servers so you dont have to manage that I dont think.
That’s something you should manage yourself, so the provider isn’t the one with the keys, by encrypting the backup locally before sending it. Most solutions you mention let you do that.
The other half is hardware. And the other other half is users.
Put everything behind Tailscale or another VPN and use it that way from outside devices. There should be very little need to have a public IP, and if there’s something that has to be exposed, use ngrok, cloudflared or Tailscale Funnel.
Ain’t nobody wanna see that.
The porn is sadly lacking, actuallly.
I thought Calkey went belly up, so to speak.
That aged like milk.