[spinax]

You've basically just described duplicity with rclone as the backend (their term). I personally add duply in front for usability (it handles your includes, excludes, "profile", etc.). Restoring is easy with these 3 working in tandem, and you can manually extract the data as needed for SHTF - just gpg encrypted tarballs. duply runs duplicity who runs rclone in a soundbite.