I would think that rclone to S3/GCS/Backblaze would be better, because what if your rsync target is also encrypted with something like this?