> The "shouldn't be able to read own backups by default because what if it's hacked" argument doesn't seem to hold much water to me, because the most valuable s

> The "shouldn't be able to read own backups by default because what if it's hacked" argument doesn't seem to hold much water to me, because the most valuable secrets will generally be those in active use on the machine. Leaking data is only one consequence of getting hacked. Another consequence is corrupting data. Even if you can't prevent the former, there are still times when you want to recover from the latter. If the attacker can overwrite old backups then you are toast.