Malleable backups are not secure when they need to be restored, something that could be necessary if by some chance a server of yours became dead suddenly.
If modification of your backups is possible then you should just sign them. Then it doesn't matter if your encryption is malleable or not. Why have just an integrity check when you can have an authenticity check as well?