If you create a new wallet.dat, encrypt it, back it up, getnewaddress and send funds to it, does the back up of the wallet.dat also have the new address? Does getnewaddress actually create a new address or just assign one? Is that what the keypool size is?
You don't have to back it up after every new address generation.
But you have to after importprivkey because it's a new privkey added to your wallet.
Doesn't each new generated public key have a new private key associated with it? So I you don't backup the wallet, you won't have the newly generated key pairs . Would be odd that it stored a bunch of keys just in case.