Restic is one of quite a few choices for encrypted backups today and as a new user I am wondering how all these choices actually compare to each other, especially in terms of threat models.
Using gocryptfs (reverse mode) in combination with rsync seems like the most simple choice for me since it uses well established tools, but I do wonder if the authenticated encryption in restic may actually provide better protection when storing data on cloud servers.
Can anyone perhaps provide a qualified assessment/comparison between these tools to help users decide what fits them best?
Restic thread model: https://restic.readthedocs.io/en/v0.7.3/references.html?ref=words.filippo.io#threat-model
Gocryptfs threat model: https://nuetzlich.net/gocryptfs/threat_model/
Borg threat model: https://borgbackup.readthedocs.io/en/stable/internals/security.html#attack-model
Rclone: Does not seen to have a specified threat model