I'd say this depend on where you want to introduce the encryption and de-duplication. I'd lean towards 1, so each machine has a standalone encrypted backup, bu

I'd say this depend on where you want to introduce the encryption and de-duplication. I'd lean towards 1, so each machine has a standalone encrypted backup, but 3 would provide easier access without the borg client for local backups, and better de-duplication if files are shared across machines.