It's easy to say "Encrypt everything," but how do you go about it? For folks looking for an "easy" cross-platform solution to encrypt your sensitive bits in the cloud, check out Cryptomator [^1].
Restic. If you create a restic backup it asks you for an encryption password, you enter it, co fogure the folders etc.
Sadly it has no gui (that I know of) but something like runtestic can help with automated incremental and encrypted backups, where you only want to keep the last n versions (and for example a weekly snapshot)
[^1]: https://cryptomator.org/
(no affiliation)