If you are using Restic Backup aren't you coming close to what's being recommended here?