A system like proxmox backup server can do this scurely. There you can create a user that can only add new backups and read the existing ones, but cannot delete any or read anything else on the remote host.

Otherwise if you only care to protect the remote machine, then something like an ssh chroot jail would also work.