[are595]

I'm not sure that's a fair summary. It's very clearly stated that there is authentication performed after encryption.

The MAC should prevent the remote server changing the counter or any encrypted bits.

[blattimwind]

> When the above attack model is extended to include multiple clients independently updating the same repository, then Borg fails to provide confidentiality

[8fingerlouie]

Which is why multiple clients are not supported within the same repository.

[blattimwind]

They absolutely are supported.