Borg has a "lackluster" encryption scheme. https://borgbackup.readthedocs.io/en/stable/internals/securi...
Restic can't pull backups. https://github.com/restic/restic/issues/299
Borg can't either, but it has "borg import-tar", which might be good enough.
There's ways to pull backups. You'd use ssh forwarding and/or the REST backend for append-only backups. See this comment:
https://github.com/restic/restic/issues/299#issuecomment-456...
> When the above attack model is extended to include multiple clients independently updating the same repository, then Borg fails to provide confidentiality (i.e. guarantees 3) and 4) do not apply any more).
There are some ideas on the issue tracker for fixing this long term (like random nonces, session keys, ...), but that stuff will have to wait until after borg 1.2 (which soon goes into release candidate phase).