[WhyNotHugo]

If you make a second backup tomorrow, you'll end up with a new (huge) encrypted tar. restic handles deltas when creating a second backup, and writes new files so that tools like rsync or rclone have to do less work to upload the new data.

That said, I don't see anything strictly _wrong_ with your approach.

[qyckudnefDi5]

No deduplication is a tradeoff I'm willing to make for simplicity and less things that can go wrong :)