Yev here -> the backup service is client-side encrypted before transmission.