Two ideas to consider for the future:
- splitting public/private information and encrypting only sensitive part. (Wikimedia are publishing all the Wikipedia contents with private information redacted/not available)
- Tarsnap integration - which is a locally-encrypted S3-based backup