I don't recall where I heard these "3-2-1 rules for backup" but I love it: 3 copies, 2 different media, 1 offsite.

I use borgbackup, encrypted of course, to backup everything I care for to a local directory, then rclone that directory up to the "cloud". That's the "offsite" one.

Then I take monthly backups (first weekend of the month) to two external HDDs, formatted identically. Those are the two media. Just to be on the safe side, they're by different manufacturers (though who knows if that means anything under the hood!)

Just to make things a bit more safe, I also backup this borg directory to my wife's computer over "syncthing" (local wifi only).

Recently, I've also started backing up everything except multimedia files (i.e., much smaller set) directly to an SD card, and keeping that SD card in my wallet. The whole card is LUKS encrypted, so this is not a borg backup; push comes to shove I can fire up a llive USB and load up this card directly.