This is also why I use rclone copy instead of rclone sync for my backups, using API keys without permission to delete objects.