If you want deduplicated, compressed, encrypted, off site backups (yes, you CAN have all of these things!), check out borgmatic (which uses borg backup). Goes over SSH, the backup node never has the ability to decrypt the data, and there are integrity checks so they can't covertly modify contents either. They just have to be trusted with regards to availability.

I'd be happy to answer any questions not covered by the documentation.