they can download the backup to have it at multiple locations, but it's useless for them because they don't have the decryption key