I use duplicity to do incremental backups that are encrypted with GPG keys. I then back everything up onto a second hard drive. And then I make a second copy that gets uploaded to backblaze B2. In theory it’s all encrypted and safe there. I then have a copy of my encryption keys on a CD, thumb drive, as well as a printed out copy that is stored in a safety deposit box.
I have my own script that I want for duplicity, but I’ve heard duplicati is it GUI that’s easy to use, but I have not used it.