That's correct, restic operates under the assumption that you cannot trust where it's storing the data.

Some more (informal) analysis on restic's crypto was done here:

https://blog.filippo.io/restic-cryptography/