I use rsync.net in zfs send/receive mode, I push only encrypted snapshots and incrementals, the key has never left my local device (well I have a paper copy in a remote place).