Yes. That is why I said that if it’s a personal backup to a machine that you have full ssh access to anyway, it doesn’t make a difference. But I totally agree: if not, rest-server is very much worth a look.
And if you want to avoid the hassle of taking care of a certificate and put the backup server where the clients can’t even access it, you might consider initiating the backup from the server via an (encrypted) ssh tunnel like I do in some cases. Then, all you have on the client is the restic executable and not even any passwords or backup server URLs.