For my VM backups I use the Proxmox backup server for my Proxmox Virtuel envoirment hosts.
The PVE nodes supports client side encryption when using the PBS as target.
I have set up the whole thing today, so that on the backup server, the data is no longer stored unencrypted.