I use rclone, which has built-in encryption (and is optional; I don't bother with encrypting copies of my Time Machine backup, because it's already encrypted),

I use rclone, which has built-in encryption (and is optional; I don't bother with encrypting copies of my Time Machine backup, because it's already encrypted), including even file and directory names.