Same setup here, Hetzner/Rclone with enc. Script runs daily on the NAS to beam everything up. Very happy.

Make at least one offline copy of what you need to decrypt and keep separate though. An inaccessible encrypted backup is no backup at all.