Just to be clear, if you do local backups to iTunes, you can encrypt those backups with a key you control