Was Tarsnap evaluated? Those behind it are well known and the construction is simple and explained clearly. My general rule: never make technology recommendations without throughly vetting/testing multiple candidates and digging deep into support, the company, and demoing close to intended use.