I have been using restic (https://restic.net/) with my backups for years, so I wanted to share it as a suggestion. Their docs have a threat model. I am not sure how restic compares to, say, Cryptomator - they may offer a lot of similar functionality.