You’ll want to protect yourself against bit rot too. Don’t go copying bad files every year.
So no encryption on the local backup for me, only the emails dump by encrypting the zip that contains them. It's not perfect but that's the compromise I (think I) have to make. (The remote one is encrypted though)