Restic has a nice feature set built on top of rclone: https://github.com/restic/restic - deduplication is particularly useful for systems with poor upload connection.
As bad practice as it is, I'm guessing I'm not the only one with a super weak recycled password for instances like that.
This isn't that surprising in the case of restic and git-annex, both of which transport over SFTP, but we have actually built into our environment the 'rclone' and 'borg' binaries such that you can execute them remotely:
ssh user@rsync.net rclone s3:/some/bucket gdrive:/what/ever