Restic makes encrypted, deduplicated snapshots and can send them to a local folder, SFTP, or object storage such as Backblaze B2 and S3. It is a single program, written in Go, and the same binary runs on the major desktops. The repository format is restic’s, not a pile of zip files you can open by hand.
You design the schedule. Restic will not nag you like a consumer backup app. Forget the password and the snapshots are unreadable. Append-only mode exists so a hacked computer cannot quietly delete the history. Read that section before you point it at a bucket and assume you are done.
Use it when the backup target is cloud storage you rent, not a Unix shell on the other end. restic.net
Restic repositories on cheap object storage need a password and a monthly restore test. Append-only mode stops a compromised laptop from deleting old snapshots. It does not stop you from losing the password. The cache on the laptop can grow. That is normal. Exclude virtual machine disks unless you mean to upload them. A first backup of a home folder is large. Later ones are the point.